CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability.

Acronis Backup Incorrect Default Permissions Vulnerability. Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.

• CISA KEV-listed (remediation due 2026-09-19)
• EPSS 0.2% (14.3% percentile)
• CVSS 7.8 high

Related briefings

• Cisco's access gatekeeper is being bypassed in attacks 2026-09-16

Browse the CVE database

Read the full analysis on IntelFusions