16975 matches found
CVE-2026-87886: Incorrect Default Permissions
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.9.3.1021, Acronis Backup extension for Plesk Linux before build 1.8.11.638, Acronis Backup plugin for DirectAdmin Linux before build...
WordPress Keep Backup Daily plugin <= 2.1.3 - Unauthenticated Sensitive Information Exposure vulnerability
Unauthenticated Sensitive Information Exposure vulnerability discovered by Aurélien BOURDOIS Elymaro in WordPress Plugin Keep Backup Daily versions = 2.1.3...
CVE-2026-73171
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a...
EUVD-2026-80729
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a...
CVE-2026-73171
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of the Advantech EKI-1242EIMS industrial switch, firmware version V1.06.01 . A remote authenticated attacker can overwrite arbitrary files on the device filesystem by uploa...
CVE-2026-73171
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a...
CVE-2026-73171
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a...
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager WHM deployments has been exploited in the wild. The vulnerability, tracked as CVE-2026-87886 CVSS score: 7.8, is described as a case of local privilege escalation due to insecure file...
CVE-2026-73171: External Control of File Name or Path
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a...
PT-2026-93254
TRC analysis shows attackers exploiting CVE-2026-87886 to escalate privileges on hosting infrastructure running Acronis cPanel backup plugins. Active campaigns demonstrate how compromised hosting environments enable lateral movement across customer systems. Runtime segmentation helps contain...
Linux Distros Unpatched Vulnerability : CVE-2026-92066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156. CVE-2026-92066 Note that Nessus relies on the...
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation...
GO-2026-6366 Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics
Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics...
CVE-2026-92066
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92066
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
UBUNTU-CVE-2026-92066
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92066 Sandbox escape in the Profile Backup component
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...
CVE-2026-92066
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...