Acronis Warns of Actively Exploited cPanel Plugin Flaw

Acronis disclosed a high-severity Linux local privilege escalation vulnerability, CVE-2026-87886, in its backup plugin for cPanel, WHM, and Plesk. The flaw, rated 7.8, allows a low-privileged attacker to gain elevated permissions on a server. Acronis has detected limited, targeted exploitation in the wild based on a single customer report.