> TritonInfoSec News
Home / Sep 17, 2026 / Story
0
#6 The Hacker News general September 16, 2026 at 11:08 UTC

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

By [email protected] (The Hacker News)

AI Summary

CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in Acronis Backup plugin for cPanel, WHM, and Plesk caused by insecure file permissions on Linux systems, has been confirmed actively exploited in targeted attacks. Web hosting providers and managed service providers running Acronis cPanel backup integrations are at direct risk and should apply available patches immediately.

Read full article → https://thehackernews.com/2026/09/acronis-cpanel-b…

Relevance score: 83.0/100

# More from September 17

  1. 1
    Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories The Hacker News
  2. 2
    Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens The Hacker News
  3. 3
    Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation The Hacker News
  4. 4
    One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude The Hacker News
  5. 5
    Critical ScreenConnect flaw now actively exploited in attacks BleepingComputer
  6. 7
    Iranian hackers use CHOSEN BRICK Windows malware to spy on targets BleepingComputer
  7. 8
    Chrome, Firefox Updates Patch 115 Vulnerabilities SecurityWeek
  8. 9
    Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data SecurityWeek
  9. 10
    Oracle Patches 800+ Vulnerabilities in September 2026 Security Update SecurityWeek