{"metadata": {"vulnerability": "cve-2026-87886", "count": 60, "kinds": {"milestone": 4, "sighting": 36, "kev": 11, "other": 9}}, "data": [{"timestamp": "2026-09-09T14:04:36.755Z", "date_only": false, "value": "2026-09-09T14:04:36.755Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-87886", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-15T21:57:00Z", "date_only": false, "value": "2026-09-15T21:57:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2026-87886", "field": "timestamps.asserted_at", "uuid": "5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-15T21:57:00Z", "date_only": false, "value": "2026-09-15T21:57:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2026-87886", "field": "evidence.0.details.added_date", "uuid": "5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-15T21:57:00Z", "date_only": false, "value": "2026-09-15T21:57:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2026-87886", "field": "timestamps.first_seen_at", "uuid": "5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-15T21:57:00Z", "date_only": false, "value": "2026-09-15T21:57:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2026-87886", "field": "status.status_updated_at", "uuid": "5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": false, "value": "2026-09-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2026-87886", "field": "timestamps.asserted_at", "uuid": "320a50a7-980d-4162-b090-c53849c01837", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": true, "value": "2026-09-16", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-87886", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": true, "value": "2026-09-16", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2026-87886", "field": "evidence.0.details.date_added", "uuid": "320a50a7-980d-4162-b090-c53849c01837", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": false, "value": "2026-09-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2026-87886", "field": "timestamps.first_seen_at", "uuid": "320a50a7-980d-4162-b090-c53849c01837", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T00:00:00Z", "date_only": false, "value": "2026-09-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2026-87886", "field": "status.status_updated_at", "uuid": "320a50a7-980d-4162-b090-c53849c01837", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T02:27:45.759Z", "date_only": false, "value": "2026-09-16T02:27:45.759982Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/abijita.bsky.social/post/3mvm3osvhv32w", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "38e88e0a-2ea1-460f-a6ec-185e873de112", "content": "Acronis Warns of Actively Exploited Linux Privilege Escalation\u00a0Flaw\n\nAcronis has warned of CVE-2026-87886, a high-severity Linux privilege escalation vulnerability affecting its cPanel, WHM, and Plesk backup integrations.", "url": "https://bsky.app/profile/abijita.bsky.social/post/3mvm3osvhv32w"}, {"timestamp": "2026-09-16T03:09:26.991Z", "date_only": false, "value": "2026-09-16T03:09:26.991149Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvm5zerud22j", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "f1556772-3d09-4d9a-a9c4-86be53c2e196", "content": "Acronis cPanel/WHM & Plesk backup plugin: Linux LPE CVE-2026-87886 (CVSS 7.8) under limited active exploitation. Patch to 1.9.3 HF3 / 1.8.11+. https://bleepingcomputer.com/news/security/acronis-warns-of-actively-exploited-flaw-in-its-cpanel-backup-plugin", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvm5zerud22j"}, {"timestamp": "2026-09-16T03:15:25.022Z", "date_only": false, "value": "2026-09-16T03:15:25.022562Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvm6dznfny2z", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "6f9fece7-e709-42dc-80b4-1f577dfb8712", "content": "Acronis disclosed CVE-2026-87886 in its cPanel, WHM, and Plesk backup plugins: a Linux local privilege escalation flaw (CVSS 7.8) already used in limited targeted attacks. #Acronis #cPanel #Plesk", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mvm6dznfny2z"}, {"timestamp": "2026-09-16T08:35:54.540Z", "date_only": false, "value": "2026-09-16T08:35:54.540604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvmqb4tajz2l", "record": "cve-2026-87886", "field": "creation_timestamp", "uuid": "d8063cc2-cef5-4210-9a06-ef31450255fb", "content": "\ud83d\udcf0 Acronis Peringatkan Celah Keamanan Plugin Backup cPanel yang Aktif Dieksploitasi\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/16/cve-2026-87886-acronis-cpanel-plesk/\n\n#acronis #cpanel #cybersecurity #keamananSiber #linux #plesk #vulnerability #webHosting #whm", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mvmqb4tajz2l"}, {"timestamp": "2026-09-16T09:41:10.518Z", "date_only": false, "value": "2026-09-16T09:41:10.518980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3mvmtvqy2uk2a", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "7758425f-0deb-4a4e-9371-7f9a01d71517", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\n\ud83d\udcd6 Read more: www.helpnetsecurity.com/2026/09/16/a...\n\n#backup #Linux #MSP #plugin #securityupdate #vulnerability #webhosting #cybersecurity #cybersecuritynews", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3mvmtvqy2uk2a"}, {"timestamp": "2026-09-16T09:45:01.122Z", "date_only": false, "value": "2026-09-16T09:45:01.122047Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvmu4p7huv2i", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "11a685e7-52d5-4407-940a-75aa6e8e9c32", "content": "Acronis\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\u3055\u308c\u308b\uff08CVE-2026-87886\uff09\n\nAcronis\u306e\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30fb\u30ea\u30ab\u30d0\u30ea\u88fd\u54c1\u3067\u3042\u308bcPanel\u3001WebHost Manager(WHM)\u3001Plesk\u5411\u3051\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u62e1\u5f35\u6a5f\u80fd\u306b\u5f71\u97ff\u3092\u53ca\u307c\u3059Linux\u6a29\u9650\u6607\u683c\u306e\u8106\u5f31\u6027(CVE-2026-87886)\u304c\u3001\u653b\u6483\u8005\u306b\u60aa\u7528\u3055\u308c\u3066\u3044\u308b\u3068\u540c\u793e\u304c\u8b66\u544a\u3057\u3066\u3044\u307e\u3059\u3002 Acronis\u306f\u706b\u66dc\u65e5\u306b\u516c\u958b\u3057\u305f\u30bb\u30ad\u30e5", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mvmu4p7huv2i"}, {"timestamp": "2026-09-16T10:25:16.206Z", "date_only": false, "value": "2026-09-16T10:25:16.206838Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mvmwen7zwc24", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "8b3e9deb-3f1a-487a-85d3-a55cf9233369", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nwww.helpnetsecurity.com/2026/09/16/a...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "url": "https://bsky.app/profile/hapsis.bsky.social/post/3mvmwen7zwc24"}, {"timestamp": "2026-09-16T13:00:05.665Z", "date_only": false, "value": "2026-09-16T13:00:05.665580Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/10069", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "75e2ceb7-a33d-475f-bc17-a4e8e0b96f55", "content": "\u26a0\ufe0f Acronis Backup flaw exploited in limited targeted attacks.\n\nCVE-2026-87886 lets a low-privileged attacker escalate permissions on affected Linux cPanel/WHM and Plesk deployments. Fixes are available.\n\nWhich builds need updating \u2192 https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "url": "https://t.me/thehackernews/10069"}, {"timestamp": "2026-09-16T13:00:39.790Z", "date_only": false, "value": "2026-09-16T13:00:39.790136Z", "kind": "sighting", "label": "Seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "046c8436-3175-4252-b5b7-3c583e97eac2", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "url": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/"}, {"timestamp": "2026-09-16T13:00:40.275Z", "date_only": false, "value": "2026-09-16T13:00:40.275443Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "46ed23a1-65ad-4aa5-88e2-01801b4774f1", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n  Acronis Backup plugin for cPanel & WHM (Linux", "url": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html"}, {"timestamp": "2026-09-16T16:00:42.866Z", "date_only": false, "value": "2026-09-16T16:00:42.866761Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "1ef32032-2d6d-48e9-bfb3-b20b74f21296", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "url": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886"}, {"timestamp": "2026-09-16T17:00:05.056Z", "date_only": false, "value": "2026-09-16T17:00:05.056529Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/55925", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "38fcb8cd-381c-4310-b751-9afc27ebd401", "content": "Acronis Patches Exploited Vulnerability in cPanel Backup Plugin\nhttps://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/\n\nCVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin (https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/55925"}, {"timestamp": "2026-09-16T19:40:21.824Z", "date_only": false, "value": "2026-09-16T19:40:21.824730Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvnvfayz252g", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "23be4f7b-799e-40fe-b16f-891498ae4dbe", "content": "\ud83d\uded1 CVE-2026-87886\nAcronis Backup\nKEV \u2705\nTL;DR: Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerabil\u2026\nhttps://cvesentinel.com/report/CVE-2026-87886?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvnvfayz252g"}, {"timestamp": "2026-09-16T20:00:01Z", "date_only": false, "value": "2026-09-16T20:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2026-87886", "field": "timestamps.recorded_at", "uuid": "320a50a7-980d-4162-b090-c53849c01837", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T20:00:02.744Z", "date_only": false, "value": "2026-09-16T20:00:02.744830Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/320a50a7-980d-4162-b090-c53849c01837", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "d5c3e9b6-c8e6-4cac-9ba0-60078b4c976d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/320a50a7-980d-4162-b090-c53849c01837"}, {"timestamp": "2026-09-16T20:01:07.750Z", "date_only": false, "value": "2026-09-16T20:01:07.750691Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnwkf3jhf2y", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "b24c8dbf-2104-4ac4-afe2-01b0f408c1f2", "content": "~Cisa~\nCISA added Cisco ISE and Acronis Backup flaws to its KEV Catalog, citing active exploitation.\n-\nIOCs: CVE-2026-76460, CVE-2026-87886\n-\n#CVE-2026-76460 #CVE-2026-87886 #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mvnwkf3jhf2y"}, {"timestamp": "2026-09-16T22:00:02Z", "date_only": false, "value": "2026-09-16T22:00:02+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2026-87886", "field": "timestamps.recorded_at", "uuid": "5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-16T22:00:31.884Z", "date_only": false, "value": "2026-09-16T22:00:31.884662Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "95335b28-ca6c-4d05-bee1-b168e8cfeb5d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c238c9c-ce9f-448b-b2cf-c1ad073c5b59"}, {"timestamp": "2026-09-16T22:59:21.786Z", "date_only": false, "value": "2026-09-16T22:59:21.786883Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3p3pn2x", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "4772a0c1-b828-4957-b528-7afdc3121849", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87886", "url": "https://bsky.app/profile/csirts.com/post/3mvoaj3p3pn2x"}, {"timestamp": "2026-09-16T23:08:22.267Z", "date_only": false, "value": "2026-09-16T23:08:22.267263Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvoaz7jf352l", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "4deeb776-2d71-42d1-b7df-de7b01fdbddc", "content": "Patch Acronis Backup for cPanel/WHM and Plesk on Linux now \u2014 CVE-2026-87886 (CVSS 7.8) privilege escalation is under active exploitation and on CISA's KEV list. https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvoaz7jf352l"}, {"timestamp": "2026-09-17T00:20:12.550Z", "date_only": false, "value": "2026-09-17T00:20:12.550502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvoeznxypt2y", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "06e5b95c-d6c6-4295-87ff-f41d7d019699", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\uff08CISA\u3001\u60aa\u7528\u304c\u78ba\u8a8d\u3055\u308c\u305f2\u4ef6\u306e\u8106\u5f31\u6027\u3092KEV\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0\uff09 #CISA (Sep 16)\n\nCVE-2026-76460 Cisco Identity Services Engine\u306b\u304a\u3051\u308b\u7279\u6a29API\u306e\u4e0d\u9069\u5207\u306a\u4f7f\u7528\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027\nCVE-2026-87886 Acronis Backup\u306e\u30c7\u30d5\u30a9\u30eb\u30c8\u6a29\u9650\u8a2d\u5b9a\u306e\u8aa4\u308a\u306b\u95a2\u3059\u308b\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mvoeznxypt2y"}, {"timestamp": "2026-09-17T00:21:32.550Z", "date_only": false, "value": "2026-09-17T00:21:32.550526Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof3zu2fl2e", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "24708716-62fe-4db7-862d-a27b14317a60", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\uff08Acronis\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u30d7\u30e9\u30b0\u30a4\u30f3\u306e\u8106\u5f31\u6027\u3001\u6a19\u7684\u578b\u653b\u6483\u3067\u60aa\u7528\uff09 #HelpNetSecurity (Sep 16)\n\nwww.helpnetsecurity.com/2026/09/16/a...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mvof3zu2fl2e"}, {"timestamp": "2026-09-17T05:22:31.652Z", "date_only": false, "value": "2026-09-17T05:22:31.652933Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "d0820085-8f3c-41b6-b3f5-456e70494b01", "content": "Acronis backup plugin flaw exploited in targeted attacks (CVE-2026-87886)\n\nA Linux privilege escalation vulnerability (CVE-2026-87886) affecting Acronis\u2019 backup extensions for cPanel, WebHost Manager (WHM), and Plesk, is being leveraged by attackers, the backup and recovery compan\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvovw7zvgs2d"}, {"timestamp": "2026-09-17T09:39:37.902Z", "date_only": false, "value": "2026-09-17T09:39:37.902144Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvpebxv7w22d", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "070aff2f-edc3-433b-8ef9-9cc23db5d68d", "content": "Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks\n\nAcronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVS\u2026\n#hackernews #news", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mvpebxv7w22d"}, {"timestamp": "2026-09-17T10:11:39.213Z", "date_only": false, "value": "2026-09-17T10:11:39.213504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mvpg37cgsv2x", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "e155cacf-3638-4c98-9819-44ca8c292735", "content": "(CISA CS-MAN) The Cyber Mind CSUITE Brief: CVE-2026-87886 \u2013 Acronis Backup Incorrect Default Permissions\u00a0Vulnerability\n\nA strategic executive briefing detailing permission hardening, risk deliberation, and incident response frameworks for CVE-2026-87886 in Acronis\u2026\n\nhttps://thecybermind.co/enr6", "url": "https://bsky.app/profile/thecybermind.co/post/3mvpg37cgsv2x"}, {"timestamp": "2026-09-17T13:01:32.731Z", "date_only": false, "value": "2026-09-17T13:01:32.731167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppl226mz24", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "ab44cc69-2838-40ef-b8d3-a58c293547d3", "content": "Acronis Backup Plugin Local Privilege Escalation Vulnerability CVE-2026-87886 #patchmanagement", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mvppl226mz24"}, {"timestamp": "2026-09-17T15:31:32.918Z", "date_only": false, "value": "2026-09-17T15:31:32.918478Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117287097836819512", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "fbc4b950-0868-409d-ac7d-cbbe7ef3a44f", "content": "\ud83d\udcf0 CISA Adds Actively Exploited Cisco and Acronis Flaws to KEV Catalog\nCISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-adds-cisco-acronis-flaws-to-kev-catalog/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/117287097836819512"}, {"timestamp": "2026-09-17T15:31:55.116Z", "date_only": false, "value": "2026-09-17T15:31:55.116282Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mvpxxwawwb2v", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "e594cd66-f5d7-4ea8-ab1d-3ecff25ca54b", "content": "CISA adds two actively exploited vulnerabilities to its KEV catalog: a critical Cisco ISE auth bypass (CVE-2026-76460) and an Acronis Backup flaw (CVE-2026-87886). Federal agencies must patch urgently. #CISA #KEV #PatchNow\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mvpxxwawwb2v"}, {"timestamp": "2026-09-17T21:43:55.964Z", "date_only": false, "value": "2026-09-17T21:43:55.964400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arc-codex.com/post/3mvqmr4sgka2x", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "9fba255a-108c-4932-a3ef-b368dc4b6f6d", "content": "CVE-2026-87886: Acronis Backup Plugin Privilege Escalation Flaw Exploited in Targeted Attacks\n\n", "url": "https://bsky.app/profile/arc-codex.com/post/3mvqmr4sgka2x"}, {"timestamp": "2026-09-17T22:57:18.089Z", "date_only": false, "value": "2026-09-17T22:57:18.089Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-87886", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-17T23:09:27.166Z", "date_only": false, "value": "2026-09-17T23:09:27.166Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Acronis", "record": "cve-2026-87886", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-17T23:18:53Z", "date_only": false, "value": "2026-09-17T23:18:53Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HRQ3-QGQ7-JM9X", "record": "GHSA-HRQ3-QGQ7-JM9X", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-17T23:18:53.763Z", "date_only": false, "value": "2026-09-17T23:18:53.763", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87886", "record": "FKIE_CVE-2026-87886", "field": "published"}, {"timestamp": "2026-09-18T00:16:41.229Z", "date_only": false, "value": "2026-09-18T00:16:41.229838Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvqvcbsxhh2w", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "1d117fdd-106a-41cc-9845-3ea3210ef957", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-87886: Local privilege escalation due to insecure file permissions\nCVSS 7.8 \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2026-87886\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mvqvcbsxhh2w"}, {"timestamp": "2026-09-18T00:26:20.175Z", "date_only": false, "value": "2026-09-18T00:26:20.175511Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvqvtk3uua23", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "6d5e27da-4642-4b7d-8fb1-d4ecdcc6a4c3", "content": "CVE-2026-87886 is trending. Hype score 15, currently #9 on cvemon.\n\nLocal privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2026-87886", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mvqvtk3uua23"}, {"timestamp": "2026-09-18T00:31:10Z", "date_only": false, "value": "2026-09-18T00:31:10Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HRQ3-QGQ7-JM9X", "record": "GHSA-HRQ3-QGQ7-JM9X", "field": "published"}, {"timestamp": "2026-09-18T04:00:05.806Z", "date_only": false, "value": "2026-09-18T04:00:05.806041Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/gwzLZHSG4Dia0tE3MjG8BEc0JfBdLFDUDzu3kSOio1HgEA", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "8943e48f-3f40-4319-b4e9-199dce6fd0ea"}, {"timestamp": "2026-09-18T06:29:15.017Z", "date_only": false, "value": "2026-09-18T06:29:15.017171Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvrk4i4auk23", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "cb3c51f1-c79f-42b0-8f43-ee54ccd0a6c5", "content": "Critical Privilege Escalation Turns Every Admin Into a Borrowed Identity\nPANIC 78% | Lag 0.0h | CVE-2026-87886 is a local privilege escalation flaw caused by insecure file permissions. It is publi\n#AfterShockIndex\nREAD MORE", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mvrk4i4auk23"}, {"timestamp": "2026-09-18T10:00:05.902Z", "date_only": false, "value": "2026-09-18T10:00:05.902060Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/8616", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "cc056b59-6934-4349-a643-b55490ce8d09", "content": "Acronis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Linux, \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f cPanel, WebHost Manager (WHM) \u0438 Plesk, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\ncPanel & WHM \u0438 Plesk \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Acronis \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b, \u0444\u0430\u0439\u043b\u044b, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 cPanel \u0438 Plesk.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0448\u043b\u0430 \u0432\u00a0\u043a\u0440\u0430\u0442\u043a\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0432 \u0435\u0435 \u043a\u0430\u043a CVE-2026-87886 \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u0432 \u0435\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 7,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-87886 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Linux, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-87886 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f, \u0434\u0430\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043b\u0430\u0433 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0447\u0442\u043e, Acronis \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0444\u0430\u043a\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u00ab\u0432 \u0432\u0438\u0434\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445, \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u00bb. Acronis \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0446\u0435\u043d\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u00ab\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0433\u043e \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00bb.\n\nCVE-2026-87886 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Acronis Backup \u0434\u043b\u044f cPanel & WHM, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.9.3.1021, \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.9.3 HF3, \u0430 \u0432 1.8.11 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Acronis Backup \u0434\u043b\u044f Plesk, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u043c\u043b\u0430\u0434\u0448\u0435 1.8.11.638.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438 \u0447\u0435\u0433\u043e \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Acronis Backup \u0434\u043b\u044f cPanel & WHM \u0438 Plesk, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/true_secator/8616"}, {"timestamp": "2026-09-18T12:27:59.851Z", "date_only": false, "value": "2026-09-18T12:27:59.851837Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-87886", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T12:27:59.851Z", "date_only": false, "value": "2026-09-18T12:27:59.851837Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87886", "record": "FKIE_CVE-2026-87886", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T14:33:42.532Z", "date_only": false, "value": "2026-09-18T14:33:42.532Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-87886", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T14:33:42.532Z", "date_only": false, "value": "2026-09-18T14:33:42.532Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-87886", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-18T15:32:09Z", "date_only": false, "value": "2026-09-18T15:32:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HRQ3-QGQ7-JM9X", "record": "GHSA-HRQ3-QGQ7-JM9X", "field": "modified"}, {"timestamp": "2026-09-18T19:29:35.067Z", "date_only": false, "value": "2026-09-18T19:29:35.067", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-87886", "record": "FKIE_CVE-2026-87886", "field": "lastModified"}, {"timestamp": "2026-09-19T00:00:00Z", "date_only": true, "value": "2026-09-19", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2026-87886", "field": "evidence.0.details.due_date", "uuid": "320a50a7-980d-4162-b090-c53849c01837", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-09-19T06:30:52.783Z", "date_only": false, "value": "2026-09-19T06:30:52.783001Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvu2od4dmf2g", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "574a844c-0fc3-4423-a1cf-9e13975d1813", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2026-87886: \u26a0\ufe0f CVE-2026-87886: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2026-87886-local-privilege-escalation-due-to-insecure", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3mvu2od4dmf2g"}, {"timestamp": "2026-09-19T21:00:04.370Z", "date_only": false, "value": "2026-09-19T21:00:04.370850Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/6613", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "3f73d67c-f506-4631-9ba1-797df336f468", "content": "Acronis \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 Linux, \u0432 \u0441\u0432\u043e\u0435\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f cPanel, WebHost Manager (WHM) \u0438 Plesk, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\ncPanel & WHM \u0438 Plesk \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u0432\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Acronis \u0434\u043b\u044f \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u044b, \u0444\u0430\u0439\u043b\u044b, \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0435 \u044f\u0449\u0438\u043a\u0438 \u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u0430 \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 cPanel \u0438 Plesk.\n\n\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0448\u043b\u0430 \u0432\u00a0\u043a\u0440\u0430\u0442\u043a\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u043d\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0432 \u0435\u0435 \u043a\u0430\u043a CVE-2026-87886 \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u0432 \u0435\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 7,8.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2026-87886 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Linux, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u0435\u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0438\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2026-87886 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0430\u044e\u0442\u0441\u044f, \u0434\u0430\u0431\u044b \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442\u044c \u043b\u0430\u0433 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u043c\u0435\u0440 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435.\n\n\u0422\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0447\u0442\u043e, Acronis \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0444\u0430\u043a\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u00ab\u0432 \u0432\u0438\u0434\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0445, \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u00bb. Acronis \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u043e\u0446\u0435\u043d\u043a\u0430 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u043e\u0434\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u043e\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u00ab\u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0433\u043e \u043e\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b\u00bb.\n\nCVE-2026-87886 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Acronis Backup \u0434\u043b\u044f cPanel & WHM, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u0432\u0448\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0434\u043e 1.9.3.1021, \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.9.3 HF3, \u0430 \u0432 1.8.11 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f Acronis Backup \u0434\u043b\u044f Plesk, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 \u043c\u043b\u0430\u0434\u0448\u0435 1.8.11.638.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u043a\u043e\u0433\u0434\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u0431\u044b\u043b\u0430 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0438 \u0447\u0435\u0433\u043e \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0432 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438.\n\n\u0412\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Acronis Backup \u0434\u043b\u044f cPanel & WHM \u0438 Plesk, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.", "url": "https://t.me/S_E_Reborn/6613"}, {"timestamp": "2026-09-21T05:19:58.872Z", "date_only": false, "value": "2026-09-21T05:19:58.872327Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3mvyxndhbyc2f", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "386ae46c-df4a-4c4e-8e2f-27179fd3dd7a", "content": "CVE-2026-87886: Insecure File Permissions in Acronis Backup Plugins for cPanel, WHM and Plesk dev.to/stark_zhuang...", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3mvyxndhbyc2f"}, {"timestamp": "2026-09-28T02:51:56.516Z", "date_only": false, "value": "2026-09-28T02:51:56.516224Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwkcmz2m622r", "record": "CVE-2026-87886", "field": "creation_timestamp", "uuid": "a8650bc2-4f3a-446e-98ed-1c9421834088", "content": "\ud83d\udd34 Acronis CVE-2026-87886 \u2014 active exploitation\n\nLocal privilege escalation can give attackers root access on vulnerable cPanel, Plesk and DirectAdmin Linux hosting servers. CISA added the flaw to KEV.\n\nstemshop.top/blog/acronis...\n\n#CVE #CVE202687886 #Acronis #cPanel #Plesk #CyberSecurity", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mwkcmz2m622r"}]}