CVE-2026-878867.8HighCWE-276
Acronis Backup Incorrect Default Permissions Vulnerability
Acronis · Backup
Exploited in the wild · in CISA KEV since 16 SepVendor fix available
0.2%probability of exploitation in the next 30 days
14th percentile
050100
Higher than 14% of scored CVEs
7.8HighCVSS 3.0
LowMediumHighCrit.
Federal deadline
CISA KEV · added 16 Sep · catalogue entry
Passed 41 days ago
DescriptionNVD
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Coverage3 articles · 3 outlets
One row per outlet, in order of first report. First in our coverage: SecurityWeek, 16 Sep.
Quiet for 6 weekslast report 17 Sep3 articles3 outlets
- Wed 16 Sep, 10:11 UTC. SecurityWeek, first report. Acronis Patches Exploited cPanel Backup Flaw Enabling Privilege Gain. Cites a CVE in CISA KEV.
- Thu 17 Sep, 00:00 UTC. CISA, its first report on the story. CISA Flags Exploited Acronis Backup Flaw Allowing Privilege Escalation. Cites a CVE in CISA KEV.
- Thu 17 Sep, 10:42 UTC. Security Affairs, its first report on the story. CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws. Cites a CVE in CISA KEV.
- First report
- Article
- Official notice
- Running total
Added to CISA KEV
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 16 Sep 10:11 | SecurityWeek | Acronis Patches Exploited cPanel Backup Flaw Enabling Privilege Gain |
| 17 Sep 00:00 | CISA | CISA Flags Exploited Acronis Backup Flaw Allowing Privilege Escalation |
| 17 Sep 10:42 | Security Affairs | CISA Flags Actively Exploited Cisco, Acronis and Pixel Flaws |
- CISA Flags Actively Exploited Cisco, Acronis and Pixel FlawsSecurity Affairs · mentions it in passing
- CISA Flags Exploited Acronis Backup Flaw Allowing Privilege EscalationCISA · official notice
- Acronis Patches Exploited cPanel Backup Flaw Enabling Privilege GainSecurityWeek · first in our coverage
New articles also arrive in the RSS feed.