＞ Weekly Report: Acronis Backup plugin for cPanel & WHMに権限昇格の脆弱性
https://www.jpcert.or.jp/wr/2026/wr260930.html#25
https://www.jpcert.or.jp/wr/2026/wr260930.html#25
Weekly Report: Acronis Backup plugin for cPanel & WHMに権限昇格の脆弱性
Acronisが提供するAcronis Backup plugin for cPanel & WHMには、権限昇格の脆弱性があります。Acronisは、今回修正された脆弱性を悪用した攻撃を確認しているとのことです。この問題は、当該製品を修正済みのバージョンに更新することで解決します。詳細は、開発者が提供する情報を参照してください。
www.jpcert.or.jp
September 30, 2026 at 3:40 AM
＞ Weekly Report: Acronis Backup plugin for cPanel & WHMに権限昇格の脆弱性
https://www.jpcert.or.jp/wr/2026/wr260930.html#25
https://www.jpcert.or.jp/wr/2026/wr260930.html#25
EQT Group:
• Acronis
Golden Seeds:
• Malcova
Horizons Ventures:
• M-XR
Partech:
• Breedr
Pioneer Fund:
• Pluto
Ten Eleven:
• Rig Security
Thoma Bravo:
• Auros
Toyota Ventures:
• Hertha Metals
Ulu Ventures:
• altitudeiq
• Acronis
Golden Seeds:
• Malcova
Horizons Ventures:
• M-XR
Partech:
• Breedr
Pioneer Fund:
• Pluto
Ten Eleven:
• Rig Security
Thoma Bravo:
• Auros
Toyota Ventures:
• Hertha Metals
Ulu Ventures:
• altitudeiq
September 30, 2026 at 1:29 AM
Build Your Brand with DADYMINDS CLOUD, visit: cloud.dadyminds.org
September 29, 2026 at 8:30 AM
Build Your Brand with DADYMINDS CLOUD, visit: cloud.dadyminds.org
The latest update for #Acronis includes "Managed identity threat detection and response (ITDR): what MSPs and #securityteams need" and "#AI security solutions: what they are and how to choose one".
#potatosecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#potatosecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
September 29, 2026 at 4:14 AM
The latest update for #Acronis includes "Managed identity threat detection and response (ITDR): what MSPs and #securityteams need" and "#AI security solutions: what they are and how to choose one".
#potatosecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#potatosecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
The latest update for #Acronis includes "Managed identity threat detection and response (ITDR): what MSPs and #securityteams need" and "#AI security solutions: what they are and how to choose one".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
Acronis
Acronis unifies data protection and cybersecurity, delivering cyber protection that solves safety, accessibility, privacy, authenticity, and security challenges.
opsmtrs.com
September 29, 2026 at 4:14 AM
The latest update for #Acronis includes "Managed identity threat detection and response (ITDR): what MSPs and #securityteams need" and "#AI security solutions: what they are and how to choose one".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
🔴 Acronis CVE-2026-87886 — active exploitation
Local privilege escalation can give attackers root access on vulnerable cPanel, Plesk and DirectAdmin Linux hosting servers. CISA added the flaw to KEV.
stemshop.top/blog/acronis...
#CVE #CVE202687886 #Acronis #cPanel #Plesk #CyberSecurity
Local privilege escalation can give attackers root access on vulnerable cPanel, Plesk and DirectAdmin Linux hosting servers. CISA added the flaw to KEV.
stemshop.top/blog/acronis...
#CVE #CVE202687886 #Acronis #cPanel #Plesk #CyberSecurity
Acronis CVE-2026-87886: Active Exploitation Targets Hosting Servers | StemShop
CVE-2026-87886 is an actively exploited local privilege escalation vulnerability in Acronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin on Linux. Attackers with local access can potentially...
stemshop.top
September 28, 2026 at 2:51 AM
🔴 Acronis CVE-2026-87886 — active exploitation
Local privilege escalation can give attackers root access on vulnerable cPanel, Plesk and DirectAdmin Linux hosting servers. CISA added the flaw to KEV.
stemshop.top/blog/acronis...
#CVE #CVE202687886 #Acronis #cPanel #Plesk #CyberSecurity
Local privilege escalation can give attackers root access on vulnerable cPanel, Plesk and DirectAdmin Linux hosting servers. CISA added the flaw to KEV.
stemshop.top/blog/acronis...
#CVE #CVE202687886 #Acronis #cPanel #Plesk #CyberSecurity
Homma ollu itellä vireillä kohta pari vuotta. Ostin 2T SSDn ja 32 G rommia. Pitää purkaa aika paljon, että saa vaihdettua ko kyseessä on HP AIO 32 " pöytäkone. Ostin semmoisen kloonausojhelman Acronis ja sitten tommoisen kotelon SSD lle .
September 27, 2026 at 7:00 AM
Homma ollu itellä vireillä kohta pari vuotta. Ostin 2T SSDn ja 32 G rommia. Pitää purkaa aika paljon, että saa vaihdettua ko kyseessä on HP AIO 32 " pöytäkone. Ostin semmoisen kloonausojhelman Acronis ja sitten tommoisen kotelon SSD lle .
The latest update for #Acronis includes "Managed #EDR pricing and #MDR costs: what to expect in 2026" and "From #AI vision to #MSP action: The journey continues this October".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
Acronis
Acronis unifies data protection and cybersecurity, delivering cyber protection that solves safety, accessibility, privacy, authenticity, and security challenges.
opsmtrs.com
September 27, 2026 at 5:06 AM
The latest update for #Acronis includes "Managed #EDR pricing and #MDR costs: what to expect in 2026" and "From #AI vision to #MSP action: The journey continues this October".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
The latest update for #Acronis includes "From #AI vision to #MSP action: The journey continues this October" and "#MDR vs #XDR: which do you need in 2026?".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
Acronis
Acronis unifies data protection and cybersecurity, delivering cyber protection that solves safety, accessibility, privacy, authenticity, and security challenges.
opsmtrs.com
September 25, 2026 at 11:40 PM
The latest update for #Acronis includes "From #AI vision to #MSP action: The journey continues this October" and "#MDR vs #XDR: which do you need in 2026?".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
The Acronis one is the quiet lesson. Local privilege escalation, needs an authenticated foothold first, 7.8 by Acronis's own rating — and Acronis confirmed exploitation observed in the wild against the cPanel and WHM plugin.
CISA publishes no score. "Needs a foothold" stopped being theoretical.
CISA publishes no score. "Needs a foothold" stopped being theoretical.
September 25, 2026 at 11:00 PM
The Acronis one is the quiet lesson. Local privilege escalation, needs an authenticated foothold first, 7.8 by Acronis's own rating — and Acronis confirmed exploitation observed in the wild against the cPanel and WHM plugin.
CISA publishes no score. "Needs a foothold" stopped being theoretical.
CISA publishes no score. "Needs a foothold" stopped being theoretical.
Chromium V8 out-of-bounds write, added Sept 9: fourteen days.
Acronis Backup local privilege escalation, added Sept 16: three days.
The browser on every desktop waited. The backup plugin that needs a foothold first did not.
Those deadlines bind federal civilian agencies only.
Acronis Backup local privilege escalation, added Sept 16: three days.
The browser on every desktop waited. The backup plugin that needs a foothold first did not.
Those deadlines bind federal civilian agencies only.
September 25, 2026 at 6:00 PM
Chromium V8 out-of-bounds write, added Sept 9: fourteen days.
Acronis Backup local privilege escalation, added Sept 16: three days.
The browser on every desktop waited. The backup plugin that needs a foothold first did not.
Those deadlines bind federal civilian agencies only.
Acronis Backup local privilege escalation, added Sept 16: three days.
The browser on every desktop waited. The backup plugin that needs a foothold first did not.
Those deadlines bind federal civilian agencies only.
The latest update for #Acronis includes "#MDR vs #XDR: which do you need in 2026?" and "HMI security: protecting human-machine interfaces from cyber threats".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
Acronis
Acronis unifies data protection and cybersecurity, delivering cyber protection that solves safety, accessibility, privacy, authenticity, and security challenges.
opsmtrs.com
September 25, 2026 at 3:49 AM
The latest update for #Acronis includes "#MDR vs #XDR: which do you need in 2026?" and "HMI security: protecting human-machine interfaces from cyber threats".
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
#cybersecurity #ThreatDetection #infosec https://opsmtrs.com/4hetaGC
FYI if you purchase Seagate external drives you can use Seagates "Disk wizard" which is actually Acronis for free.
September 25, 2026 at 1:21 AM
FYI if you purchase Seagate external drives you can use Seagates "Disk wizard" which is actually Acronis for free.
Red Heron nutzt kritische Gitea-Lücke für internationale Cyberangriffe
#Cyberangriff @acronis #Cybersecurity #Cybersicherheit #Gitea #Linux #LinuxRootkit #RedHeron #Schadsoftware
netzpalaver.de/2026/09/14/r...
#Cyberangriff @acronis #Cybersecurity #Cybersicherheit #Gitea #Linux #LinuxRootkit #RedHeron #Schadsoftware
netzpalaver.de/2026/09/14/r...
September 24, 2026 at 1:36 PM
Red Heron nutzt kritische Gitea-Lücke für internationale Cyberangriffe
#Cyberangriff @acronis #Cybersecurity #Cybersicherheit #Gitea #Linux #LinuxRootkit #RedHeron #Schadsoftware
netzpalaver.de/2026/09/14/r...
#Cyberangriff @acronis #Cybersecurity #Cybersicherheit #Gitea #Linux #LinuxRootkit #RedHeron #Schadsoftware
netzpalaver.de/2026/09/14/r...
📢 Un acteur chinois vole 18 000 dossiers gouvernementaux via WordPress et exploite ZyXEL GS1900
Ce rapport documente l'activité d'un acteur malveillant cybernétique (MCA) suivi depuis juin 2026 via le Global Observation Grid (GOG) de…
🟢 vérification factuelle haute
#WordPress #ZyXEL #Cyberveille
Ce rapport documente l'activité d'un acteur malveillant cybernétique (MCA) suivi depuis juin 2026 via le Global Observation Grid (GOG) de…
🟢 vérification factuelle haute
#WordPress #ZyXEL #Cyberveille
Un acteur chinois vole 18 000 dossiers gouvernementaux via WordPress et exploite ZyXEL GS1900
Ce rapport documente l'activité d'un acteur malveillant cybernétique (MCA) suivi depuis juin 2026 via le Global Observation Grid (GOG) de GreyNoise. L'acteur est suspecté d'être sinophone, opérant en UTC+8, et est relié au groupe "Red Heron" précédemment rapporté par Acronis, sur la base d'un domaine C2 commun, d'une famille de malware partagée et de TTPs similaires.
cyberveille.ch
September 22, 2026 at 3:00 PM
📢 Un acteur chinois vole 18 000 dossiers gouvernementaux via WordPress et exploite ZyXEL GS1900
Ce rapport documente l'activité d'un acteur malveillant cybernétique (MCA) suivi depuis juin 2026 via le Global Observation Grid (GOG) de…
🟢 vérification factuelle haute
#WordPress #ZyXEL #Cyberveille
Ce rapport documente l'activité d'un acteur malveillant cybernétique (MCA) suivi depuis juin 2026 via le Global Observation Grid (GOG) de…
🟢 vérification factuelle haute
#WordPress #ZyXEL #Cyberveille
Build Your Brand with DADYMINDS CLOUD, visit: cloud.dadyminds.org
September 22, 2026 at 8:30 AM
Build Your Brand with DADYMINDS CLOUD, visit: cloud.dadyminds.org
ハッカーが政府WordPressサイトに侵入、平文パスワード含む18,566件のレコードを窃取
今回の侵害は、世界中の脆弱なWordPress設置環境を狙った広範なキャンペーンの一環でした。2026年5月7日以降の活動は、単独の悪意あるサイバー攻撃者によるものとされており、中国語を話す攻撃者であり、UTC+8のタイムゾーンで活動している可能性があるとみられています。 この攻撃者は、Acronisが以前報告した「
今回の侵害は、世界中の脆弱なWordPress設置環境を狙った広範なキャンペーンの一環でした。2026年5月7日以降の活動は、単独の悪意あるサイバー攻撃者によるものとされており、中国語を話す攻撃者であり、UTC+8のタイムゾーンで活動している可能性があるとみられています。 この攻撃者は、Acronisが以前報告した「
ハッカーが政府WordPressサイトに侵入、平文パスワード含む18,566件のレコードを窃取
今回の侵害は、世界中の脆弱なWordPress設置環境を狙った広範なキャンペーンの一環でした。2026年5月7日以降の活動は、単独の悪意あるサイバー攻撃者によるものとされており、中国語を話す攻撃者であり、UTC+8のタイムゾーンで活動している可能性があるとみられています。 この攻撃者は、Acronisが以前報告した「
blackhatnews.tokyo
September 22, 2026 at 6:46 AM
ハッカーが政府WordPressサイトに侵入、平文パスワード含む18,566件のレコードを窃取
今回の侵害は、世界中の脆弱なWordPress設置環境を狙った広範なキャンペーンの一環でした。2026年5月7日以降の活動は、単独の悪意あるサイバー攻撃者によるものとされており、中国語を話す攻撃者であり、UTC+8のタイムゾーンで活動している可能性があるとみられています。 この攻撃者は、Acronisが以前報告した「
今回の侵害は、世界中の脆弱なWordPress設置環境を狙った広範なキャンペーンの一環でした。2026年5月7日以降の活動は、単独の悪意あるサイバー攻撃者によるものとされており、中国語を話す攻撃者であり、UTC+8のタイムゾーンで活動している可能性があるとみられています。 この攻撃者は、Acronisが以前報告した「
Die weltweite Malware-Erkennungsrate ist laut Telemetriedaten von Acronis im Juli 2026 den dritten Monat in Folge gesunken. Gleichzeitig nahm die Zahl der gemeldeten Datenschutzverletzungen deutlich zu.
<a href="https://www.sysbus.eu/?p=31965" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">https://www.sysbus.eu/?p=31965
<a href="https://www.sysbus.eu/?p=31965" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">https://www.sysbus.eu/?p=31965
September 21, 2026 at 8:15 AM
Die weltweite Malware-Erkennungsrate ist laut Telemetriedaten von Acronis im Juli 2026 den dritten Monat in Folge gesunken. Gleichzeitig nahm die Zahl der gemeldeten Datenschutzverletzungen deutlich zu.
<a href="https://www.sysbus.eu/?p=31965" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">https://www.sysbus.eu/?p=31965
<a href="https://www.sysbus.eu/?p=31965" class="hover:underline text-blue-600 dark:text-sky-400 no-card-link" target="_blank" rel="noopener" data-link="bsky">https://www.sysbus.eu/?p=31965
CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and Plesk dev.to/stark_zhuang...
CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and Plesk
CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and...
dev.to
September 21, 2026 at 5:19 AM
CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and Plesk dev.to/stark_zhuang...
Cisco patched an exploited Secure Email Gateway 0-day as last week also brought major incidents at Revolut, CenterPoint Energy, and HBO Max, plus new AI-related vulnerability and breach reports. #Cisco #Revolut #Spain
Week In Review: Cisco Patches Exploited Email Gateway 0-day, Revolut Breach
Last week’s security news highlighted major breaches, active exploits, and AI-related risks, including incidents at Revolut, CenterPoint Energy, HBO Max, and the first data breach blamed on an autonomous AI agent in Spain. It also covered critical vulnerabilities in Cisco Secure Email Gateway, Cisco ISE, Acronis, Parallels Desktop, and AI coding agents, alongside new guidance and tools from CISA, ENISA, NIST, Google, and Microsoft. #Revolut #CenterPointEnergy #HBOMax #CiscoSecureEmailGateway #CiscoISE #Acronis #ParallelsDesktop #ENISA #CISA #NIST #Google #Microsoft
www.hendryadrian.com
September 20, 2026 at 3:15 PM
Základem aktivit společnosti zůstává distribuce řešení kybernetické bezpečnosti od výrobců Acronis, GFI Software, N-able, Virtuozzo, Impossible Cloud, AST a Company (Un)Hacked. www.itbiz.cz/zebra-system...
ZEBRA SYSTEMS se mění na ZEBR.AI – ITBiz.cz
Evoluce lokálního distributora kybernetické bezpečnosti na globálního AI-first distributora sjednotí mezinárodní aktivity a přinese partnerům rychlejší adopci AI technologií.
www.itbiz.cz
September 20, 2026 at 1:00 PM
Základem aktivit společnosti zůstává distribuce řešení kybernetické bezpečnosti od výrobců Acronis, GFI Software, N-able, Virtuozzo, Impossible Cloud, AST a Company (Un)Hacked. www.itbiz.cz/zebra-system...
WD Blue SN5000 SSD 2TB NVMe SSD, Disco duro SSD con velocidad hasta 5150 MB/s, PCIe Gen4, nCache Technology, Acronis True Image para Western Digital migración de discos y clonación
📉 Baja de 380,00 a 276,99€
💶 Ahorro: 103,01€ (27%)
🔗 https://amzlink.to/az0SHdcQEw0Jz
📉 Baja de 380,00 a 276,99€
💶 Ahorro: 103,01€ (27%)
🔗 https://amzlink.to/az0SHdcQEw0Jz
September 18, 2026 at 11:48 PM
WD Blue SN5000 SSD 2TB NVMe SSD, Disco duro SSD con velocidad hasta 5150 MB/s, PCIe Gen4, nCache Technology, Acronis True Image para Western Digital migración de discos y clonación
📉 Baja de 380,00 a 276,99€
💶 Ahorro: 103,01€ (27%)
🔗 https://amzlink.to/az0SHdcQEw0Jz
📉 Baja de 380,00 a 276,99€
💶 Ahorro: 103,01€ (27%)
🔗 https://amzlink.to/az0SHdcQEw0Jz