GoKawiilAcronis fixes actively exploited privilege escalation bug in cPanel/Plesk backup plugin
Acronis has patched a high-severity local privilege escalation flaw, tracked as CVE-2026-87886, in its backup add-ons for cPanel/WHM and Plesk. The company says it has seen limited, targeted exploitation attempts against affected deployments, based on a report from one potentially affected customer. Fixed versions are 1.9.3 HF3 for cPanel/WHM and 1.8.11 for Plesk.
GoKawiil's interpretation of the reporting above, not reported fact.
These backup plugins are widely used by hosting providers to manage sensitive customer data, so a privilege escalation bug could let a low-level attacker gain full server control without user interaction. Acronis withheld technical details to give administrators time to patch before attackers can reverse-engineer the exploit further, underscoring the risk to unpatched hosting environments.
- CVE-2026-87886 is a high-severity Linux privilege escalation flaw scoring 7.8 in severity.
- It affects Acronis Backup plugins for cPanel/WHM and Plesk, now patched in versions 1.9.3 HF3 and 1.8.11.
- Acronis reports limited, targeted exploitation in the wild but has not confirmed indicators of compromise or attacker objectives.
Source: bleepingcomputer.com, 2026-09-15
Published there as: “Acronis warns of actively exploited flaw in its cPanel backup plugin”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.