<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 18:22:22 +0000</lastBuildDate>
    <item>
      <title>e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b</title>
      <link>https://vulnerability.circl.lu/sighting/e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b/export</link>
      <description>{"uuid": "e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvpxxwawwb2v", "content": "CISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-17T15:31:55.116282Z"}</description>
      <content:encoded>{"uuid": "e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvpxxwawwb2v", "content": "CISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-17T15:31:55.116282Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b/export</guid>
      <pubDate>Thu, 17 Sep 2026 15:31:55 +0000</pubDate>
    </item>
    <item>
      <title>fbc4b950-0868-409d-ac7d-cbbe7ef3a44f</title>
      <link>https://vulnerability.circl.lu/sighting/fbc4b950-0868-409d-ac7d-cbbe7ef3a44f/export</link>
      <description>{"uuid": "fbc4b950-0868-409d-ac7d-cbbe7ef3a44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117287097836819512", "content": "\ud83d\udcf0 CISA Adds Actively Exploited Cisco and Acronis Flaws to KEV Catalog\nCISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-cisco-acronis-flaws-to-kev-catalog/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-17T15:31:32.918478Z"}</description>
      <content:encoded>{"uuid": "fbc4b950-0868-409d-ac7d-cbbe7ef3a44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117287097836819512", "content": "\ud83d\udcf0 CISA Adds Actively Exploited Cisco and Acronis Flaws to KEV Catalog\nCISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-cisco-acronis-flaws-to-kev-catalog/?utm_source=mastodon&amp;amp;utm_medium=social&amp;amp;utm_campaign=daily", "creation_timestamp": "2026-09-17T15:31:32.918478Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fbc4b950-0868-409d-ac7d-cbbe7ef3a44f/export</guid>
      <pubDate>Thu, 17 Sep 2026 15:31:32 +0000</pubDate>
    </item>
    <item>
      <title>ab44cc69-2838-40ef-b8d3-a58c293547d3</title>
      <link>https://vulnerability.circl.lu/sighting/ab44cc69-2838-40ef-b8d3-a58c293547d3/export</link>
      <description>{"uuid": "ab44cc69-2838-40ef-b8d3-a58c293547d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppl226mz24", "content": "Acronis Backup Plugin Local Privilege Escalation Vulnerability CVE-2026-87886 #patchmanagement", "creation_timestamp": "2026-09-17T13:01:32.731167Z"}</description>
      <content:encoded>{"uuid": "ab44cc69-2838-40ef-b8d3-a58c293547d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppl226mz24", "content": "Acronis Backup Plugin Local Privilege Escalation Vulnerability CVE-2026-87886 #patchmanagement", "creation_timestamp": "2026-09-17T13:01:32.731167Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ab44cc69-2838-40ef-b8d3-a58c293547d3/export</guid>
      <pubDate>Thu, 17 Sep 2026 13:01:32 +0000</pubDate>
    </item>
    <item>
      <title>e155cacf-3638-4c98-9819-44ca8c292735</title>
      <link>https://vulnerability.circl.lu/sighting/e155cacf-3638-4c98-9819-44ca8c292735/export</link>
      <description>{"uuid": "e155cacf-3638-4c98-9819-44ca8c292735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvpg37cgsv2x", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-87886 \u2013 Acronis Backup Incorrect Default Permissions\u00a0Vulnerability\n\nA strategic executive briefing detailing permission hardening, risk deliberation, and incident response frameworks for CVE-2026-87886 in Acronis\u2026\n\nhttps://thecybermind.co/enr6", "creation_timestamp": "2026-09-17T10:11:39.213504Z"}</description>
      <content:encoded>{"uuid": "e155cacf-3638-4c98-9819-44ca8c292735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvpg37cgsv2x", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-87886 \u2013 Acronis Backup Incorrect Default Permissions\u00a0Vulnerability\n\nA strategic executive briefing detailing permission hardening, risk deliberation, and incident response frameworks for CVE-2026-87886 in Acronis\u2026\n\nhttps://thecybermind.co/enr6", "creation_timestamp": "2026-09-17T10:11:39.213504Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e155cacf-3638-4c98-9819-44ca8c292735/export</guid>
      <pubDate>Thu, 17 Sep 2026 10:11:39 +0000</pubDate>
    </item>
    <item>
      <title>070aff2f-edc3-433b-8ef9-9cc23db5d68d</title>
      <link>https://vulnerability.circl.lu/sighting/070aff2f-edc3-433b-8ef9-9cc23db5d68d/export</link>
      <description>{"uuid": "070aff2f-edc3-433b-8ef9-9cc23db5d68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvpebxv7w22d", "content": "Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks\n\nAcronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVS\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T09:39:37.902144Z"}</description>
      <content:encoded>{"uuid": "070aff2f-edc3-433b-8ef9-9cc23db5d68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvpebxv7w22d", "content": "Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks\n\nAcronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVS\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T09:39:37.902144Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/070aff2f-edc3-433b-8ef9-9cc23db5d68d/export</guid>
      <pubDate>Thu, 17 Sep 2026 09:39:37 +0000</pubDate>
    </item>
    <item>
      <title>d0820085-8f3c-41b6-b3f5-456e70494b01</title>
      <link>https://vulnerability.circl.lu/sighting/d0820085-8f3c-41b6-b3f5-456e70494b01/export</link>
      <description>{"uuid": "d0820085-8f3c-41b6-b3f5-456e70494b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nA Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis\u2019 backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T05:22:31.652933Z"}</description>
      <content:encoded>{"uuid": "d0820085-8f3c-41b6-b3f5-456e70494b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nA Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis\u2019 backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T05:22:31.652933Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d0820085-8f3c-41b6-b3f5-456e70494b01/export</guid>
      <pubDate>Thu, 17 Sep 2026 05:22:31 +0000</pubDate>
    </item>
    <item>
      <title>6438a939-afe6-4ad0-a052-fb6a1276d1e3</title>
      <link>https://vulnerability.circl.lu/sighting/6438a939-afe6-4ad0-a052-fb6a1276d1e3/export</link>
      <description>{"uuid": "6438a939-afe6-4ad0-a052-fb6a1276d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-17T01:00:37.343064Z"}</description>
      <content:encoded>{"uuid": "6438a939-afe6-4ad0-a052-fb6a1276d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-17T01:00:37.343064Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6438a939-afe6-4ad0-a052-fb6a1276d1e3/export</guid>
      <pubDate>Thu, 17 Sep 2026 01:00:37 +0000</pubDate>
    </item>
    <item>
      <title>21bdf158-971a-4cc5-8d06-8f2c3b6eab58</title>
      <link>https://vulnerability.circl.lu/sighting/21bdf158-971a-4cc5-8d06-8f2c3b6eab58/export</link>
      <description>{"uuid": "21bdf158-971a-4cc5-8d06-8f2c3b6eab58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n  Acronis Backup plugin for cPanel &amp;amp; WHM (Linux", "creation_timestamp": "2026-09-17T01:00:36.973443Z"}</description>
      <content:encoded>{"uuid": "21bdf158-971a-4cc5-8d06-8f2c3b6eab58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n  Acronis Backup plugin for cPanel &amp;amp; WHM (Linux", "creation_timestamp": "2026-09-17T01:00:36.973443Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/21bdf158-971a-4cc5-8d06-8f2c3b6eab58/export</guid>
      <pubDate>Thu, 17 Sep 2026 01:00:36 +0000</pubDate>
    </item>
    <item>
      <title>d8ebe859-0ab2-4a94-8949-607dd5dffbbd</title>
      <link>https://vulnerability.circl.lu/sighting/d8ebe859-0ab2-4a94-8949-607dd5dffbbd/export</link>
      <description>{"uuid": "d8ebe859-0ab2-4a94-8949-607dd5dffbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:36.638762Z"}</description>
      <content:encoded>{"uuid": "d8ebe859-0ab2-4a94-8949-607dd5dffbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:36.638762Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d8ebe859-0ab2-4a94-8949-607dd5dffbbd/export</guid>
      <pubDate>Thu, 17 Sep 2026 01:00:36 +0000</pubDate>
    </item>
    <item>
      <title>82d7d187-749c-4d7d-835c-5815d2117273</title>
      <link>https://vulnerability.circl.lu/sighting/82d7d187-749c-4d7d-835c-5815d2117273/export</link>
      <description>{"uuid": "82d7d187-749c-4d7d-835c-5815d2117273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/thehackernews/10069", "content": "\u26a0\ufe0f Acronis Backup flaw exploited in limited targeted attacks.\n\nCVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.\n\nWhich builds need updating \u2192 https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-17T01:00:04.300125Z"}</description>
      <content:encoded>{"uuid": "82d7d187-749c-4d7d-835c-5815d2117273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/thehackernews/10069", "content": "\u26a0\ufe0f Acronis Backup flaw exploited in limited targeted attacks.\n\nCVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.\n\nWhich builds need updating \u2192 https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-17T01:00:04.300125Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82d7d187-749c-4d7d-835c-5815d2117273/export</guid>
      <pubDate>Thu, 17 Sep 2026 01:00:04 +0000</pubDate>
    </item>
  </channel>
</rss>
