Advisories · Technology

Acronis Backup extension for Plesk.

Every CVE that names Acronis Backup extension for Plesk among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87886 CVE record

CVSS 7.8 HighCritical · KEVKEV

Incorrect default permissions in Acronis Backup plugin for cPanel & WHM and others
- Acronis Backup plugin for cPanel & WHM
- Acronis Backup extension for Plesk
- Broken access control
Not analysed yet 17 Sept 2026
CVE-2025-24832 CVE record

CVSS 4.4 Medium

Arbitrary file overwrite during home directory recovery due to improper symbolic link handling.
- Acronis Backup plugin for cPanel & WHM
- Acronis Backup extension for Plesk
- CWE-61
Not analysed yet 27 Feb 2025
CVE-2024-34014 CVE record

CVSS 5.5 Medium

Arbitrary file overwrite during recovery due to improper symbolic link handling.
- Acronis Backup plugin for cPanel & WHM
- Acronis Backup extension for Plesk
- CWE-61
Not analysed yet 11 Nov 2024
CVE-2024-8767 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Execution with unnecessary privileges in Acronis Backup plugin for cPanel & WHM and others
- Acronis Backup plugin for cPanel & WHM
- Acronis Backup extension for Plesk
- Privilege escalation
Not analysed yet 17 Sept 2024