HIGHVulnerability
Verified
Global

CISA KEV: Acronis Backup — Acronis Backup Incorrect Default Permissions Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

Analysis

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation. Added to CISA Known Exploited Vulnerabilities catalog on 2026-09-16. Remediation due: 2026-09-19.

Indicators of Compromise (1)

CVE (1)
CVE-2026-87886
Source Attribution

Originally published by CISA KEV on Sep 16, 2026. Verified by: CISA.

Related Threats