CYBERSECURITYTRACKER
Permanent story citation

Acronis warns of actively exploited flaw in its cPanel backup plugin

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 7444

As cited

Copy frozen at (site build).

vulnerabilities

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager, and Plesk that attackers are actively exploiting. The flaw allows unauthorized privilege elevation on affected systems running the vulnerable plugin.

Why it matters: Organizations using Acronis backup plugins on cPanel, WHM, or Plesk servers face immediate risk of local privilege escalation; administrators should prioritize patching or disabling the affected plugin.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

vulnerabilities

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis revealed a high-severity local privilege escalation vulnerability affecting its backup plugin for cPanel, WebHost Manager, and Plesk hosting platforms. The flaw is being actively exploited in the field. The company has issued a disclosure to alert administrators and vendors of the affected software.

Why it matters: Hosting providers and administrators running cPanel, WHM, or Plesk with the Acronis backup plugin face immediate risk of privilege escalation attacks; patching or disabling the plugin should be prioritized.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary