CVE-2026-87886: acronis acronis_backup

CVSS 7.8 (high) · listed as exploited by CISA since 2026-09-16 · published 2026-09-17

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Affected products (NVD): acronis acronis_backup

Fixed in (NVD): 1.2.3, 1.8.11, 1.9.3

Weakness: CWE-276

Source: NVD CVE-2026-87886

References

• https://security-advisory.acronis.com/advisories/SEC-10986
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-87886

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.