Contact us
Vulnerability lookup

CVE-2026-87886

high CVSS 7.8 Exploited in the wild EPSS 0.3%

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Versions it affects

Software versions checked with the free lookup that CVE-2026-87886 applies to, and the release that fixes it where the sources name one.

At a glance

Severity
High
CVSS base score
7.8 out of 10
Known exploited
Yes: listed in CISA's catalogue of vulnerabilities exploited in the wild
EPSS
0.3% probability of exploitation in the next 30 days, higher than 21% of scored vulnerabilities
Weakness
CWE-276
Published
2026-09-17

Is this running somewhere in your estate?

The Vulnerability Reporter inventories every machine and tells you when an advisory like this one applies to you.