CVE-2026-87886: Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin

Description

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Affected Products

Vendor	Product	Versions
acronis	acronis_backup	unspecified, unspecified, unspecified

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
linux	linux_kernel	cve_cpe	95%

References

https://security-advisory.acronis.com/advisories/SEC-10986(vendor-advisory)

Related News (2 articles)

Tier D

Help Net Security7h ago

Week in review: Cisco patches exploited email gateway 0-day, Revolut breach

→ No new info (linked only)

Tier C

VulDB2d ago

CVE-2026-87886 | Acronis Backup Plugin permission

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.8 HIGH

VectorCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA KEV✅ Yes

Actively exploited✅ Yes

Patch available

1.9.3.10211.8.11.6381.2.3.238

CWECWE-276

PublishedSep 17, 2026

Last enriched2d ago

Trending Score123🔥

Source articles2

Independent2

Info Completeness5/14

Missing: vendor, product, versions, epss, kev, exploit, patch, iocs, mitre_attack

CVE-2026-87886: Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin

Description

Affected Products

Also Affects

References

Related News (2 articles)

Discussion (0)

Community Vote

Pin to Dashboard

Verification

Vulnerability Timeline