[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-87886":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-18T04:32:10.098Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":131,"aliases":132,"duplicate_of":9,"upstream":133,"downstream":134,"duplicates":135,"related":136,"reserved_at":9,"published_at":137,"modified_at":138,"state":139,"summary":140,"references_raw":149,"kevs":156,"epss":9,"epss_history":167,"metrics":168,"affected":176},"CVE-2026-87886","Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","weakness","Draft","Base","Medium",[20,68,127],{"id":21,"name":22,"techniques":23},"CAPEC-1","Accessing Functionality Not Properly Constrained by ACLs",[24],{"id":25,"name":26,"tactics":27,"countermeasures":43},"T1574.010","Services File Permissions Weakness",[28,31,34,37,40],{"id":29,"name":30},"TA0110","Persistence",{"id":32,"name":33},"TA0111","Privilege Escalation",{"id":35,"name":36},"TA0030","Defense Evasion",{"id":38,"name":39},"TA0005","Stealth",{"id":41,"name":42},"TA0104","Execution",[44,49,54,59,63],{"id":45,"name":46,"tactic":47},"D3-RS","Restore Software",{"name":48},"Restore",{"id":50,"name":51,"tactic":52},"D3-SWI","Software Inventory",{"name":53},"Model",{"id":55,"name":56,"tactic":57},"D3-SBV","Service Binary Verification",{"name":58},"Detect",{"id":60,"name":61,"tactic":62},"D3-AVE","Asset Vulnerability Enumeration",{"name":53},{"id":64,"name":65,"tactic":66},"D3-SU","Software Update",{"name":67},"Harden",{"id":69,"name":70,"techniques":71},"CAPEC-127","Directory Indexing",[72],{"id":73,"name":74,"tactics":75,"countermeasures":79},"T1083","File and Directory Discovery",[76],{"id":77,"name":78},"TA0102","Discovery",[80,85,89,94,98,102,106,110,114,118,122],{"id":81,"name":82,"tactic":83},"D3-CQ","Content Quarantine",{"name":84},"Isolate",{"id":86,"name":87,"tactic":88},"D3-FE","File Encryption",{"name":67},{"id":90,"name":91,"tactic":92},"D3-DF","Decoy File",{"name":93},"Deceive",{"id":95,"name":96,"tactic":97},"D3-FA","File Analysis",{"name":58},{"id":99,"name":100,"tactic":101},"D3-FIM","File Integrity Monitoring",{"name":58},{"id":103,"name":104,"tactic":105},"D3-LFP","Local File Permissions",{"name":84},{"id":107,"name":108,"tactic":109},"D3-CF","Content Filtering",{"name":84},{"id":111,"name":112,"tactic":113},"D3-RFAM","Remote File Access Mediation",{"name":84},{"id":115,"name":116,"tactic":117},"D3-RF","Restore File",{"name":48},{"id":119,"name":120,"tactic":121},"D3-CM","Content Modification",{"name":84},{"id":123,"name":124,"tactic":125},"D3-FEV","File Eviction",{"name":126},"Evict",{"id":128,"name":129,"techniques":130},"CAPEC-81","Web Server Logs Tampering",[],[],[],[],[],[],[],"2026-09-17T22:57:18.089Z","2026-09-17T23:09:27.166Z","Received",{"cisa_kev":141,"cisa_ransomware":142,"cisa_vendor":143,"epss_severity":9,"epss_score":9,"severity":144,"severity_score":145,"severity_version":146,"severity_source":147,"severity_vector":148,"severity_status":139},true,false,"Acronis","high",7.8,"v3.0","cve.org","CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[150],{"url":151,"sources":152,"tags":154},"https://security-advisory.acronis.com/advisories/SEC-10986",[147,153],"nvd",[155],"Vendor Advisory",[157],{"source":158,"vendor":143,"product":159,"date_added":160,"vulnerability_name":161,"short_description":162,"required_action":163,"due_date":164,"known_ransomware_campaign_use":165,"notes":166,"exploitation_type":9},"cisa","Backup","2026-09-16","Acronis Backup Incorrect Default Permissions Vulnerability","Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-09-19","Unknown","https://security-advisory.acronis.com/advisories/SEC-10986 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87886",[],[169,174],{"source":147,"cvss_v2_0":9,"cvss_v3_0":170,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":145,"baseSeverity":171,"vectorString":148,"impactScore":172,"exploitabilityScore":173},"HIGH",9.8,4.6,{"source":153,"cvss_v2_0":9,"cvss_v3_0":175,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":145,"baseSeverity":171,"vectorString":148,"impactScore":172,"exploitabilityScore":173},[177,189,196],{"ecosystem":9,"name":178,"vendor":179,"product":180,"cpe_part":181,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":182},"Acronis Backup extension for Plesk","acronis","acronis backup extension for plesk","a",[183],{"version":184,"is_range":141,"range_type":147,"version_start":185,"version_start_type":186,"version_end":187,"version_end_type":188,"fixed_in":9},">= unspecified, \u003C 1.8.11.638","unspecified","including","1.8.11.638","excluding",{"ecosystem":9,"name":190,"vendor":179,"product":191,"cpe_part":181,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":192},"Acronis Backup plugin for cPanel & WHM","acronis backup plugin for cpanel & whm",[193],{"version":194,"is_range":141,"range_type":147,"version_start":185,"version_start_type":186,"version_end":195,"version_end_type":188,"fixed_in":9},">= unspecified, \u003C 1.9.3.1021","1.9.3.1021",{"ecosystem":9,"name":197,"vendor":179,"product":198,"cpe_part":181,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":199},"Acronis Backup plugin for DirectAdmin","acronis backup plugin for directadmin",[200],{"version":201,"is_range":141,"range_type":147,"version_start":185,"version_start_type":186,"version_end":202,"version_end_type":188,"fixed_in":9},">= unspecified, \u003C 1.2.3.238","1.2.3.238"]