A Linux privilege escalation vulnerability (CVE-2026-87886) in Acronis backup plugins is being exploited in limited, targeted attacks against cPanel & WHM deployments. The article confirms active exploitation but does not provide specific affected or fixed version numbers, a CVSS score, or a recommended workaround.
A Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis’ backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery company warns. “Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments,” Acronis said in the security advisory published on Tuesday. There’s currently no signs of its active exploitation on Plesk deployments. What the backup plugins … More → The post Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886) appeared first on Help Net Security .