CVE-2026-87886

Summary

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Affected Software

VendorProductVersion RangeStatus
AcronisAcronis Backup plugin for cPanel & WHMunspecified < 1.9.3.1021affected
AcronisAcronis Backup extension for Pleskunspecified < 1.8.11.638affected
AcronisAcronis Backup plugin for DirectAdminunspecified < 1.2.3.238affected

Weaknesses

  • CWE-276: CWE-276

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: active
    • Automatable: no
    • Technical Impact: total

Additional References

References