CVE-2022-45451

Introduction System Specs: Windows 10 1809 x64 EN Target: Acronis Home Cyber Protect Acronis Cyber Protect Vulnerability Description The Acronis "ngscan" anti-malware scan driver suffers from incorrect / improper access control placed on the filter communication port. The minifilter driver suppor...

CVE-2026-87095

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure ACI before build 6.0.1-112, Acronis Cyber Infrastructure ACI before build 6.1.1-64, Acronis Cyber Infrastructure ACI before build 6.2.1-71...

CVE-2026-87096

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure ACI before build 6.0.1-112, Acronis Cyber Infrastructure ACI before build 6.1.1-64, Acronis Cyber Infrastructure ACI before build 6.2.1-71...

CVE-2026-87096

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure ACI before build 6.0.1-112, Acronis Cyber Infrastructure ACI before build 6.1.1-64, Acronis Cyber Infrastructure ACI before build 6.2.1-71...

EUVD-2026-107161

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure ACI before build 6.0.1-112, Acronis Cyber Infrastructure ACI before build 6.1.1-64, Acronis Cyber Infrastructure ACI before build 6.2.1-71...

CVE-2026-87096

The Acronis Cyber Infrastructure (ACI) platform is affected by a vulnerability involving improper authorization checks , which can lead to sensitive information disclosure and manipulation . The affected versions include ACI before build 6.0.1-112 , before build 6.1.1-64 , and before build 6.2.1-...

EUVD-2026-107160

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure ACI before build 6.0.1-112, Acronis Cyber Infrastructure ACI before build 6.1.1-64, Acronis Cyber Infrastructure ACI before build 6.2.1-71...

CVE-2026-87095

Acronis Cyber Infrastructure (ACI) is vulnerable to sensitive information disclosure and manipulation due to improper authorization checks (CWE-863). This flaw affects products running before build 6.0.1-112 , 6.1.1-64 , and 6.2.1-71 . The vulnerability has a CRITICAL CVSSv3 score of 9.1 , indica...

PT-2026-120521

Sensitive information disclosure and manipulation due to improper authorization checks. The following products are affected: Acronis Cyber Infrastructure ACI before build 6.0.1-112, Acronis Cyber Infrastructure ACI before build 6.1.1-64, Acronis Cyber Infrastructure ACI before build 6.2.1-71...

EUVD-2026-82595

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...

CVE-2026-87886

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...

CVE-2026-87886

CVE-2026-87886 is a local privilege escalation vulnerability caused by insecure default file permissions in three Acronis Backup Linux integrations: the cPanel & WHM plugin (before build 1.9.3.1021), the Plesk extension (before build 1.8.11.638), and the DirectAdmin plugin (before build 1.2.4.238...

CVE-2026-87886

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...

CVE-2026-87886

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...

Local privilege escalation due to insecure file permissions

Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments...

CVE-2026-87886: Incorrect Default Permissions

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...

Acronis Backup RCE

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers is related to improperly used standard permissions. Exploiting this vulnerability allows a malicious actor to increase their privileges and execute arbitrary code remotely...

CVE-2026-87886: Incorrect Default Permissions

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability CVE-2026-87886 Acronis Backup Incorrect Default Permissions Vulnerabili...

Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks

Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager WHM deployments has been exploited in the wild. The vulnerability, tracked as CVE-2026-87886 CVSS score: 7.8, is described as a case of local privilege escalation due to insecure file...