17 September 2026
Reference: CVE-2026-87886
1. What is being reported?
Security experts have identified a weakness in Acronis Backup software where default settings give too many permissions. This flaw is being actively exploited by attackers to escalate their access privileges, meaning they can do more damage or steal data from affected systems.
2. What this means in plain English
If your organisation uses Acronis Backup, especially with cPanel on Linux servers, attackers might be able to break into your backup system and access sensitive information or disrupt your data protection. This could lead to data loss or downtime, which can be costly and damaging.
3. Could this affect a small business?
Small businesses using Acronis Backup software with cPanel on Linux servers could be affected. If you do not use this software or plugin, or if your backups are managed differently, this vulnerability likely does not impact you. However, it is important to check with your IT provider.
4. What to do now
- Contact your IT provider or software supplier immediately to confirm if you use Acronis Backup with the affected plugin.
- Ensure that all recommended mitigations and security updates from Acronis are applied promptly following their instructions.
- Review your backup system’s internet exposure and access permissions to reduce risk, following official security guidance.
- If mitigations are not available or cannot be applied, consider discontinuing use of the affected product until it is safe.
5. Ask your IT provider
Can you confirm whether our Acronis Backup software with cPanel plugin is affected by CVE-2026-87886, and what steps have been taken to mitigate or patch this vulnerability?
6. Bottom line
If you use Acronis Backup with cPanel on Linux, act quickly to apply fixes or mitigations to protect your data from active attacks.
Information based on CISA KEV, reputable security news reports, and official vulnerability tracking.