Acronis Warns of Security Vulnerability in Backup Plugin

Acronis has identified a high-severity security vulnerability in its backup plugin for cPanel and Web Host Manager (WHM). This vulnerability, listed under the CVE number CVE-2026-87886, has a CVSS score of 7.8 and allows for local privilege escalation due to insecure file permissions. The affected versions are specific to the Linux environment of the Acronis Backup plugin. The vulnerability has already been exploited in targeted attacks, underscoring the urgency of the issue. Acronis has informed affected customers and strongly recommends implementing the necessary security updates promptly.

The exact number of affected systems is currently unknown; however, the vulnerability is classified as critical. It enables attackers to access or manipulate sensitive data by exploiting the faulty permissions. This could have severe consequences for the data security of companies relying on Acronis's backup solutions. The attacks could target both servers and end devices connected to the plugin. Acronis has already taken steps to address the security vulnerability.

An update that resolves the vulnerability is expected soon. However, the exact release date of the update is still pending, and Acronis has not provided specific timelines. Customers should regularly check official channels to stay informed. The discovery of this vulnerability comes at a time when cyberattacks on companies worldwide are increasing. According to a recent study, 70% of companies experienced at least one cyberattack in the past year.

The need to implement and regularly update security solutions is becoming increasingly urgent. IT security experts advise not only updating the software but also reviewing the overall security policies within companies. This includes training employees on handling potential threats and implementing multi-factor authentication processes. These measures can help mitigate the impact of security vulnerabilities. The Acronis security vulnerability is not the first of its kind.

In the past, there have been similar incidents that highlight the importance of regular updates and security reviews. Companies relying on Acronis solutions should therefore take proactive measures and regularly check their systems for vulnerabilities. The CVE-2026-87886 vulnerability affects not only the software itself but also the infrastructure on which it operates. A comprehensive security strategy should also include reviewing server configurations and network security. Acronis has emphasized that the security of its customers' data is a top priority and will continue to work on improving its products.

The exact impact of the security vulnerability on the affected companies will only become apparent over time. However, Acronis has already announced that it will take all necessary steps to ensure the security of its products. The vulnerability was publicly disclosed on September 15, 2026.