{"vulnerability": "CVE-2026-8788", "sightings": [{"uuid": "43c894f7-b539-4998-a1e5-3145b74055da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8788", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mm4drwo3u62g", "content": "CVE-2026-8788: Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections", "creation_timestamp": "2026-05-18T07:23:19.528568Z"}, {"uuid": "d281bbd5-e01f-4b52-8aa0-bf8d1883ed4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8788", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mm4hfltxds2i", "content": "CVE-2026-8788 - Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections\nCVE ID : CVE-2026-8788\n \n Published : May 18, 2026, 6:34 a.m. | 1\u00a0hour, 37\u00a0minutes ago\n \n Description : Net::Statsd::Lite versions through 0.10.0 for Perl allowed metric injections.\n\nT...", "creation_timestamp": "2026-05-18T08:28:00.444672Z"}, {"uuid": "2375c260-a326-4867-9801-35fe70138d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87888", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvdnxdo47g2m", "content": "\ud83d\udfe0 CVE-2026-87888 - High (8)\n\nThe YayPricing  WordPress plugin before 3.5.7 does not perform an authorization check on a REST r...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-87888/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T18:00:43.396020Z"}, {"uuid": "38e88e0a-2ea1-460f-a6ec-185e873de112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvm3osvhv32w", "content": "Acronis Warns of Actively Exploited Linux Privilege Escalation\u00a0Flaw\n\nAcronis has warned of CVE-2026-87886, a high-severity Linux privilege escalation vulnerability affecting its cPanel, WHM, and Plesk backup integrations.", "creation_timestamp": "2026-09-16T02:27:45.759982Z"}, {"uuid": "f1556772-3d09-4d9a-a9c4-86be53c2e196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvm5zerud22j", "content": "Acronis cPanel/WHM & Plesk backup plugin: Linux LPE CVE-2026-87886 (CVSS 7.8) under limited active exploitation. Patch to 1.9.3 HF3 / 1.8.11+. https://bleepingcomputer.com/news/security/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin", "creation_timestamp": "2026-09-16T03:09:26.991149Z"}, {"uuid": "6f9fece7-e709-42dc-80b4-1f577dfb8712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvm6dznfny2z", "content": "Acronis disclosed CVE-2026-87886 in its cPanel, WHM, and Plesk backup plugins: a Linux local privilege escalation flaw (CVSS 7.8) already used in limited targeted attacks. #Acronis #cPanel #Plesk", "creation_timestamp": "2026-09-16T03:15:25.022562Z"}, {"uuid": "d8063cc2-cef5-4210-9a06-ef31450255fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-87886", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvmqb4tajz2l", "content": "\ud83d\udcf0 Acronis Peringatkan Celah Keamanan Plugin Backup cPanel yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/16/cve-2026-87886-acronis-cpanel-plesk/\n\n#acronis #cpanel #cybersecurity #keamananSiber #linux #plesk #vulnerability #webHosting #whm", "creation_timestamp": "2026-09-16T08:35:54.540604Z"}, {"uuid": "7758425f-0deb-4a4e-9371-7f9a01d71517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mvmtvqy2uk2a", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/09/16/a...\n\n#backup #Linux #MSP #plugin #securityupdate #vulnerability #webhosting #cybersecurity #cybersecuritynews", "creation_timestamp": "2026-09-16T09:41:10.518980Z"}, {"uuid": "11a685e7-52d5-4407-940a-75aa6e8e9c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvmu4p7huv2i", "content": "Acronis\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-87886\uff09\n\nAcronis\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30fb\u30ea\u30ab\u30d0\u30ea\u88fd\u54c1\u3067\u3042\u308bcPanel\u3001WebHost Manager(WHM)\u3001Plesk\u5411\u3051\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u62e1\u5f35\u6a5f\u80fd\u306b\u5f71\u97ff\u3092\u53ca\u307c\u3059Linux\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027(CVE-2026-87886)\u304c\u3001\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u540c\u793e\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 Acronis\u306f\u706b\u66dc\u65e5\u306b\u516c\u958b\u3057\u305f\u30bb\u30ad\u30e5", "creation_timestamp": "2026-09-16T09:45:01.122047Z"}, {"uuid": "8b3e9deb-3f1a-487a-85d3-a55cf9233369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvmwen7zwc24", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nwww.helpnetsecurity.com/2026/09/16/a...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-09-16T10:25:16.206838Z"}, {"uuid": "75e2ceb7-a33d-475f-bc17-a4e8e0b96f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/thehackernews/10069", "content": "\u26a0\ufe0f Acronis Backup flaw exploited in limited targeted attacks.\n\nCVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.\n\nWhich builds need updating \u2192 https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-16T13:00:05.665580Z"}, {"uuid": "046c8436-3175-4252-b5b7-3c583e97eac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-16T13:00:39.790136Z"}, {"uuid": "46ed23a1-65ad-4aa5-88e2-01801b4774f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n  Acronis Backup plugin for cPanel & WHM (Linux", "creation_timestamp": "2026-09-16T13:00:40.275443Z"}, {"uuid": "1ef32032-2d6d-48e9-bfb3-b20b74f21296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-16T16:00:42.866761Z"}, {"uuid": "38fcb8cd-381c-4310-b751-9afc27ebd401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/information_security_channel/55925", "content": "Acronis Patches Exploited Vulnerability in cPanel Backup Plugin\nhttps://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/\n\nCVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin (https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-16T17:00:05.056529Z"}, {"uuid": "23be4f7b-799e-40fe-b16f-891498ae4dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvnvfayz252g", "content": "\ud83d\uded1 CVE-2026-87886\nAcronis Backup\nKEV \u2705\nTL;DR: Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerabil\u2026\nhttps://cvesentinel.com/report/CVE-2026-87886?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-16T19:40:21.824730Z"}, {"uuid": "d5c3e9b6-c8e6-4cac-9ba0-60078b4c976d", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/320a50a7-980d-4162-b090-c53849c01837", "content": "", "creation_timestamp": "2026-09-16T20:00:02.744830Z"}, {"uuid": "b24c8dbf-2104-4ac4-afe2-01b0f408c1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnwkf3jhf2y", "content": "~Cisa~\nCISA added Cisco ISE and Acronis Backup flaws to its KEV Catalog, citing active exploitation.\n-\nIOCs: CVE-2026-76460, CVE-2026-87886\n-\n#CVE-2026-76460 #CVE-2026-87886 #ThreatIntel", "creation_timestamp": "2026-09-16T20:01:07.750691Z"}, {"uuid": "95335b28-ca6c-4d05-bee1-b168e8cfeb5d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "content": "", "creation_timestamp": "2026-09-16T22:00:31.884662Z"}, {"uuid": "4772a0c1-b828-4957-b528-7afdc3121849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3p3pn2x", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87886", "creation_timestamp": "2026-09-16T22:59:21.786883Z"}, {"uuid": "4deeb776-2d71-42d1-b7df-de7b01fdbddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvoaz7jf352l", "content": "Patch Acronis Backup for cPanel/WHM and Plesk on Linux now \u2014 CVE-2026-87886 (CVSS 7.8) privilege escalation is under active exploitation and on CISA's KEV list. https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-16T23:08:22.267263Z"}, {"uuid": "06e5b95c-d6c6-4295-87ff-f41d7d019699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvoeznxypt2y", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-76460 Cisco Identity Services Engine\u306b\u304a\u3051\u308b\u7279\u6a29API\u306e\u4e0d\u9069\u5207\u306a\u4f7f\u7528\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\nCVE-2026-87886 Acronis Backup\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u6a29\u9650\u8a2d\u5b9a\u306e\u8aa4\u308a\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "creation_timestamp": "2026-09-17T00:20:12.550502Z"}, {"uuid": "24708716-62fe-4db7-862d-a27b14317a60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof3zu2fl2e", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\uff08Acronis\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\uff09 #HelpNetSecurity (Sep 16)\n\nwww.helpnetsecurity.com/2026/09/16/a...", "creation_timestamp": "2026-09-17T00:21:32.550526Z"}, {"uuid": "2d15e645-61f7-4941-b0f2-1a1301195db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/information_security_channel/55925", "content": "Acronis Patches Exploited Vulnerability in cPanel Backup Plugin\nhttps://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/\n\nCVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin (https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-17T01:00:03.363497Z"}, {"uuid": "82d7d187-749c-4d7d-835c-5815d2117273", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/thehackernews/10069", "content": "\u26a0\ufe0f Acronis Backup flaw exploited in limited targeted attacks.\n\nCVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.\n\nWhich builds need updating \u2192 https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-17T01:00:04.300125Z"}, {"uuid": "21bdf158-971a-4cc5-8d06-8f2c3b6eab58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n  Acronis Backup plugin for cPanel & WHM (Linux", "creation_timestamp": "2026-09-17T01:00:36.973443Z"}, {"uuid": "d8ebe859-0ab2-4a94-8949-607dd5dffbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-17T01:00:36.638762Z"}, {"uuid": "6438a939-afe6-4ad0-a052-fb6a1276d1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-17T01:00:37.343064Z"}, {"uuid": "d0820085-8f3c-41b6-b3f5-456e70494b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nA Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis\u2019 backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery compan\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T05:22:31.652933Z"}, {"uuid": "070aff2f-edc3-433b-8ef9-9cc23db5d68d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvpebxv7w22d", "content": "Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks\n\nAcronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVS\u2026\n#hackernews #news", "creation_timestamp": "2026-09-17T09:39:37.902144Z"}, {"uuid": "e155cacf-3638-4c98-9819-44ca8c292735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvpg37cgsv2x", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-87886 \u2013 Acronis Backup Incorrect Default Permissions\u00a0Vulnerability\n\nA strategic executive briefing detailing permission hardening, risk deliberation, and incident response frameworks for CVE-2026-87886 in Acronis\u2026\n\nhttps://thecybermind.co/enr6", "creation_timestamp": "2026-09-17T10:11:39.213504Z"}, {"uuid": "ab44cc69-2838-40ef-b8d3-a58c293547d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppl226mz24", "content": "Acronis Backup Plugin Local Privilege Escalation Vulnerability CVE-2026-87886 #patchmanagement", "creation_timestamp": "2026-09-17T13:01:32.731167Z"}, {"uuid": "fbc4b950-0868-409d-ac7d-cbbe7ef3a44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117287097836819512", "content": "\ud83d\udcf0 CISA Adds Actively Exploited Cisco and Acronis Flaws to KEV Catalog\nCISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-cisco-acronis-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-09-17T15:31:32.918478Z"}, {"uuid": "e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvpxxwawwb2v", "content": "CISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-09-17T15:31:55.116282Z"}, {"uuid": "9fba255a-108c-4932-a3ef-b368dc4b6f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvqmr4sgka2x", "content": "CVE-2026-87886: Acronis Backup Plugin Privilege Escalation Flaw Exploited in Targeted Attacks\n\n", "creation_timestamp": "2026-09-17T21:43:55.964400Z"}, {"uuid": "6d5e27da-4642-4b7d-8fb1-d4ecdcc6a4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvqvtk3uua23", "content": "CVE-2026-87886 is trending. Hype score 15, currently #9 on cvemon.\n\nLocal privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87886", "creation_timestamp": "2026-09-18T00:26:20.175511Z"}, {"uuid": "1d117fdd-106a-41cc-9845-3ea3210ef957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvqvcbsxhh2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-87886: Local privilege escalation due to insecure file permissions\nCVSS 7.8 \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-87886\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-18T00:16:41.229838Z"}, {"uuid": "8943e48f-3f40-4319-b4e9-199dce6fd0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "exploited", "source": "Telegram/gwzLZHSG4Dia0tE3MjG8BEc0JfBdLFDUDzu3kSOio1HgEA", "content": "", "creation_timestamp": "2026-09-18T04:00:05.806041Z"}, {"uuid": "cb3c51f1-c79f-42b0-8f43-ee54ccd0a6c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvrk4i4auk23", "content": "Critical Privilege Escalation Turns Every Admin Into a Borrowed Identity\nPANIC 78% | Lag 0.0h | CVE-2026-87886 is a local privilege escalation flaw caused by insecure file permissions. It is publi\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-09-18T06:29:15.017171Z"}, {"uuid": "cc056b59-6934-4349-a643-b55490ce8d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "exploited", "source": "https://t.me/true_secator/8616", "content": "Acronis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Linux, \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f cPanel, WebHost Manager (WHM) \u0438 Plesk, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\ncPanel & WHM \u0438 Plesk \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Acronis \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b, \u0444\u0430\u0439\u043b\u044b, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 cPanel \u0438 Plesk.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0448\u043b\u0430 \u0432\u00a0\u043a\u0440\u0430\u0442\u043a\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0432 \u0435\u0435 \u043a\u0430\u043a CVE-2026-87886 \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u0432 \u0435\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 7,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-87886 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Linux, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-87886 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f, \u0434\u0430\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043b\u0430\u0433 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0447\u0442\u043e, Acronis \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0444\u0430\u043a\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u00ab\u0432 \u0432\u0438\u0434\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445, \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u00bb. Acronis \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0446\u0435\u043d\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u00ab\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0433\u043e \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00bb.\n\nCVE-2026-87886 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Acronis Backup \u0434\u043b\u044f cPanel & WHM, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.9.3.1021, \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.9.3 HF3, \u0430 \u0432 1.8.11 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Acronis Backup \u0434\u043b\u044f Plesk, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u043c\u043b\u0430\u0434\u0448\u0435 1.8.11.638.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438 \u0447\u0435\u0433\u043e \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Acronis Backup \u0434\u043b\u044f cPanel & WHM \u0438 Plesk, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "creation_timestamp": "2026-09-18T10:00:05.902060Z"}]}