Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability

56
Patch now
HIGH 7.8EXPLOITEDUPGRADEUPGRADEUPGRADE

CVE-2026-87886 is a high-severity flaw (CVSS 7.8) affecting acronis backup, acronis backup, acronis backup, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

Why this priority

  • High severity
  • Exploited in the wild (CISA KEV)

A fixed release or distro patch exists.

Risk facts

CVSS score7.8 (High)
Attack vectorLocal
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.2% (top 87%)
CISA exploited listYes, fix due 2026-09-19
WeaknessCWE-276
Published2026-09-17
Last modified2026-09-18
Publisher (CNA): Acronis International GmbH · Vendor: acronis

Am I affected?

Timeline

acronis acronis backup UPGRADE
Affected: < 1.2.3
Fixed in: 1.2.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy acronis-backup || rpm -q acronis-backup || acronis-backup --version
2. UPGRADE to 1.2.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade acronis-backup
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade acronis-backup
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
acronis acronis backup UPGRADE
Affected: < 1.8.11
Fixed in: 1.8.11
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy acronis-backup || rpm -q acronis-backup || acronis-backup --version
2. UPGRADE to 1.8.11 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade acronis-backup
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade acronis-backup
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
acronis acronis backup UPGRADE
Affected: < 1.9.3 · 1.9.3 · 1.9.3 hotfix1 · 1.9.3 hotfix2
Fixed in: 1.9.3
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy acronis-backup || rpm -q acronis-backup || acronis-backup --version
2. UPGRADE to 1.9.3 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade acronis-backup
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade acronis-backup
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Exact fixes by distribution

Fedora 46 · retext · FIXED · 8.1.0-1.fc46 · FEDORA-2026-0602a84203 · source
sudo dnf upgrade --advisory=FEDORA-2026-0602a84203
Verify at the official source NVD · CVE Program · CISA KEV catalog · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-87886?

acronis backup: upgrade to 1.2.3; acronis backup: upgrade to 1.8.11; acronis backup: upgrade to 1.9.3. Exact commands for each OS are on this page.

Is CVE-2026-87886 being exploited?

Yes. CVE-2026-87886 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.

What does CVE-2026-87886 affect?

CVE-2026-87886 affects acronis backup, acronis backup, acronis backup. Severity is high (CVSS 7.8). Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Ac

How urgent is CVE-2026-87886?

Priority 56/100. High severity; Exploited in the wild (CISA KEV)

References

← Back to latest CVEs