EUVD Vulnerability Catalog Actively Exploited (KEV)

EUVD-2026-82595

Severity: HIGH Base Score: 7.8 CVSS Version: 3.0

Vulnerability Description

Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.

CVSS Vector Analysis

Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

▪ Attack Vector (AV): Local

▪ Attack Complexity (AC): Low

▪ Privileges Required (PR): Low

▪ User Interaction (UI): None

▪ Scope (S): Unchanged

▪ Confidentiality Impact (C): High

▪ Integrity Impact (I): High

▪ Availability Impact (A): High

Affected Vendors & Systems

Vendor Acronis

References & Advisory Links

https://security-advisory.acronis.com/advisories/SEC-10986

Metadata Profile

Database Authority

European Union Agency for Cybersecurity (ENISA) EUVD

Assigner

Acronis

EPSS Probability

Known Aliases

CVE-2026-87886 GHSA-hrq3-qgq7-jm9x

Published On

2026-09-17

Last Updated

2026-09-17

Exploited Since

2026-09-16