CVE-2026-87886

KEV
Published: Set 18, 2026 Last Modified: Set 18, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high

Description

AI Translation Available

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

276

Incorrect Default Permissions

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality Integrity
Potential Impacts:
Read Application Data Modify Application Data
Applicable Platforms
Technologies: Not Technology-Specific, ICS/OT
Likelihood of Exploit: Medium
View CWE Details
Application

Acronis Backup by Acronis

Product Information
Vendor Acronis
Product Acronis Backup
Version Range Affected
To 1.9.3 (exclusive)
cpe:2.3:a:acronis:acronis_backup:*:*:*:*:*:cpanel:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acronis Backup by Acronis

Product Information
Vendor Acronis
Product Acronis Backup
Version Range Affected
To 1.2.3 (exclusive)
cpe:2.3:a:acronis:acronis_backup:*:*:*:*:*:directadmin:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acronis Backup by Acronis

Product Information
Vendor Acronis
Product Acronis Backup
Version 1.9.3
cpe:2.3:a:acronis:acronis_backup:1.9.3:-:*:*:*:cpanel:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acronis Backup by Acronis

Product Information
Vendor Acronis
Product Acronis Backup
Version Range Affected
To 1.8.11 (exclusive)
cpe:2.3:a:acronis:acronis_backup:*:*:*:*:*:plesk:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acronis Backup by Acronis

Product Information
Vendor Acronis
Product Acronis Backup
Version 1.9.3
cpe:2.3:a:acronis:acronis_backup:1.9.3:hotfix1:*:*:*:cpanel:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acronis Backup by Acronis

Product Information
Vendor Acronis
Product Acronis Backup
Version 1.9.3
cpe:2.3:a:acronis:acronis_backup:1.9.3:hotfix2:*:*:*:cpanel:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026…
https://security-advisory.acronis.com/advisories/SEC-10986
https://security-advisory.acronis.com/advisories/SEC-10986