Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Acronis has issued a warning about a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager deployments that is being exploited in targeted attacks. The vulnerability is a local privilege escalation issue caused by insecure file permissions. It has a CVSS score of 7.8 and is tracked as CVE-2026-87886. The affected versions are the Acronis Backup plugin for cPanel and WHM on Linux. This vulnerability allows for exploitation in the wild, posing a risk to affected systems.