CVE-2026-87886: Acronis Backup Plugin Privilege Escalation Flaw Exploited in Targeted Attacks

Acronis has disclosed a high-severity Linux privilege-escalation vulnerability affecting its Backup integrations for cPanel & WHM and Plesk after detecting exploitation in targeted attacks. Tracked as CVE-2026-87886 and rated 7.8 on the CVSS scale by Acronis, the flaw stems from insecure file permissions and can allow an authenticated attacker with limited privileges to increase their access on a vulnerable hosting server. Acronis confirmed that exploitation has been…