September 20, 2026

CVE Watchtower

← Back to CVE List

CVE-2026-87886NVD

Description

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.
Severity Level
HIGH (7.8)
Published Date
17/09/2026
Last Modified
18/09/2026
Exploitation Status
????
EPSS Score
0.25% (percentile 17.4%)

CVSS Base Metrics

CVSS v3 (3.0)
HIGH 7.8
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-276 - CWE-276

Affected & Patched Versions

ProductAffected VersionsPatched Version
Acronis Acronis Backup plugin for cPanel & WHMunspecified - < 1.9.3.1021N/A
Acronis Acronis Backup extension for Pleskunspecified - < 1.8.11.638N/A
Acronis Acronis Backup plugin for DirectAdminunspecified - < 1.2.3.238N/A
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.
📧Email Delivery — Threat intel straight to your inbox.
♾️Unlimited Vendors — Track your entire stack.
🚨All New CVEs — Be the first to know.
⚙️Custom EPSS — Filter noise, focus on risk.
💬Webhooks — Slack & Teams integration.
🚫Ad-Free — Uninterrupted experience.

References