Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-87886

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Ba

Description

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Acronis Acronis Backup plugin for cPanel & WHM

Default version status: unaffected

  • unspecified to < 1.9.3.1021affected

Acronis Acronis Backup extension for Plesk

Default version status: unaffected

  • unspecified to < 1.8.11.638affected

Acronis Acronis Backup plugin for DirectAdmin

Default version status: unaffected

  • unspecified to < 1.2.3.238affected

References