https://www.phllaps.net/tags/acronis/ Recent content in Acronis on PhllapsNET Hugo en-gb Wed, 16 Sep 2026 00:00:00 +0000 https://www.phllaps.net/posts/acronis-backup-incorrect-default-permissions-vulnerability/ Wed, 16 Sep 2026 00:00:00 +0000 https://www.phllaps.net/posts/acronis-backup-incorrect-default-permissions-vulnerability/ <div style="background:#6b7280;color:white;padding:16px 18px;border-radius:14px;font-weight:800;font-size:18px;display:flex;align-items:center;gap:12px;box-shadow:0 10px 24px rgba(0,0,0,0.18);"><span style="font-size:24px;">🚨</span><span>SEVERITY: UNKNOWN</span><span style="opacity:0.95;font-weight:700;margin-left:auto;">Security Advisory</span></div> <h2 id="tldr-">TL;DR 📌</h2> <ul> <li>Acronis Backup plugin for cPanel &amp; WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.</li> <li><strong>Listed in CISA KEV</strong> (2026-09-16) — this is being exploited in the wild.</li> <li><strong>Check the advisory for fixed releases</strong> — remediation detail is in the vendor link below.</li> <li>CVEs: CVE-2026-87886.</li> </ul> <h2 id="what-it-is">What it is</h2> <p>CVE-2026-87886 affects the Acronis Backup plugin for cPanel &amp; WHM and the equivalent extension for Plesk. The flaw is an incorrect default permissions issue, which typically means files, directories, or configuration data tied to the plugin are left accessible in a way that allows a local user without the intended privilege level to read, modify, or otherwise interact with them.</p>