Acronis flags exploited privilege-escalation flaw in backup plugins

Acronis has identified CVE-2026-87886, a high-severity local privilege-escalation vulnerability in its backup integrations for cPanel, WHM and Plesk. The company says exploitation has been detected in limited, targeted attacks, based on a single report from a potentially affected customer. A low-privileged attacker could raise permissions on a vulnerable Linux server, potentially accessing or changing sensitive data and disrupting the system. Acronis released fixes for affected cPanel and Plesk plugin versions.