https://vulnerability.circl.lu/sightings/feed 2026-09-17T23:36:50.957116+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9fba255a-108c-4932-a3ef-b368dc4b6f6d/export 2026-09-17T23:36:50.978160+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9fba255a-108c-4932-a3ef-b368dc4b6f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvqmr4sgka2x", "content": "CVE-2026-87886: Acronis Backup Plugin Privilege Escalation Flaw Exploited in Targeted Attacks\n\n", "creation_timestamp": "2026-09-17T21:43:55.964400Z"} 2026-09-17T21:43:55.964400+00:00 https://vulnerability.circl.lu/sighting/e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b/export 2026-09-17T23:36:50.980815+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvpxxwawwb2v", "content": "CISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-17T15:31:55.116282Z"} 2026-09-17T15:31:55.116282+00:00 https://vulnerability.circl.lu/sighting/fbc4b950-0868-409d-ac7d-cbbe7ef3a44f/export 2026-09-17T23:36:50.980984+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fbc4b950-0868-409d-ac7d-cbbe7ef3a44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117287097836819512", "content": "\ud83d\udcf0 CISA Adds Actively Exploited Cisco and Acronis Flaws to KEV Catalog\nCISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-cisco-acronis-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-17T15:31:32.918478Z"} 2026-09-17T15:31:32.918478+00:00 https://vulnerability.circl.lu/sighting/ab44cc69-2838-40ef-b8d3-a58c293547d3/export 2026-09-17T23:36:50.981113+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ab44cc69-2838-40ef-b8d3-a58c293547d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppl226mz24", "content": "Acronis Backup Plugin Local Privilege Escalation Vulnerability CVE-2026-87886 #patchmanagement", "creation_timestamp": "2026-09-17T13:01:32.731167Z"} 2026-09-17T13:01:32.731167+00:00 https://vulnerability.circl.lu/sighting/e155cacf-3638-4c98-9819-44ca8c292735/export 2026-09-17T23:36:50.981229+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e155cacf-3638-4c98-9819-44ca8c292735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvpg37cgsv2x", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-87886 \u2013 Acronis Backup Incorrect Default Permissions\u00a0Vulnerability\n\nA strategic executive briefing detailing permission hardening, risk deliberation, and incident response frameworks for CVE-2026-87886 in Acronis\u2026\n\nhttps://thecybermind.co/enr6", "creation_timestamp": "2026-09-17T10:11:39.213504Z"} 2026-09-17T10:11:39.213504+00:00 https://vulnerability.circl.lu/sighting/070aff2f-edc3-433b-8ef9-9cc23db5d68d/export 2026-09-17T23:36:50.981347+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "070aff2f-edc3-433b-8ef9-9cc23db5d68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvpebxv7w22d", "content": "Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks\n\nAcronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVS\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T09:39:37.902144Z"} 2026-09-17T09:39:37.902144+00:00 https://vulnerability.circl.lu/sighting/d0820085-8f3c-41b6-b3f5-456e70494b01/export 2026-09-17T23:36:50.981487+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d0820085-8f3c-41b6-b3f5-456e70494b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nA Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis\u2019 backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T05:22:31.652933Z"} 2026-09-17T05:22:31.652933+00:00 https://vulnerability.circl.lu/sighting/6438a939-afe6-4ad0-a052-fb6a1276d1e3/export 2026-09-17T23:36:50.981669+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6438a939-afe6-4ad0-a052-fb6a1276d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-17T01:00:37.343064Z"} 2026-09-17T01:00:37.343064+00:00 https://vulnerability.circl.lu/sighting/21bdf158-971a-4cc5-8d06-8f2c3b6eab58/export 2026-09-17T23:36:50.981819+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "21bdf158-971a-4cc5-8d06-8f2c3b6eab58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n Acronis Backup plugin for cPanel & WHM (Linux", "creation_timestamp": "2026-09-17T01:00:36.973443Z"} 2026-09-17T01:00:36.973443+00:00 https://vulnerability.circl.lu/sighting/d8ebe859-0ab2-4a94-8949-607dd5dffbbd/export 2026-09-17T23:36:50.981982+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d8ebe859-0ab2-4a94-8949-607dd5dffbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:36.638762Z"} 2026-09-17T01:00:36.638762+00:00