Acronis Backup Extension For Plesk vulnerabilities
4 known vulnerabilities affecting acronis/acronis_backup_extension_for_plesk.
Total CVEs
4
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL1HIGH1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2026-87886P1HIGHCVSS 7.8KEV≥ unspecified, < 1.8.11.6382026-09-17
CVE-2026-87886 [HIGH] CWE-276 CVE-2026-87886: Local privilege escalation due to insecure file permissions. The following products are affected: Ac
Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021, Acronis Backup extension for Plesk (Linux) before build 1.8.11.638, Acronis Backup plugin for DirectAdmin (Linux) before build 1.2.3.238.
nvd
CVE-2024-8767P3CRITICALCVSS 9.9≥ unspecified, < 5552024-09-17
CVE-2024-8767 [CRITICAL] CWE-250 CVE-2024-8767: Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following p
Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.
nvd
CVE-2024-34014P4MEDIUMCVSS 5.5≥ unspecified, < 1.8.6.5992024-11-11
CVE-2024-34014 [MEDIUM] CWE-61 CVE-2024-34014: Arbitrary file overwrite during recovery due to improper symbolic link handling. The following produ
Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.6.599, Acronis Backup plugin for
nvd
CVE-2025-24832P4MEDIUMCVSS 5.5≥ unspecified, < 1.8.7.6152025-02-27
CVE-2025-24832 [MEDIUM] CWE-61 CVE-2025-24832: Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The
Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.
nvd