https://vulnerability.circl.lu/sightings/feed 2026-09-16T23:18:42.816929+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4deeb776-2d71-42d1-b7df-de7b01fdbddc/export 2026-09-16T23:18:42.846345+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4deeb776-2d71-42d1-b7df-de7b01fdbddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mvoaz7jf352l", "content": "Patch Acronis Backup for cPanel/WHM and Plesk on Linux now \u2014 CVE-2026-87886 (CVSS 7.8) privilege escalation is under active exploitation and on CISA's KEV list. https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "creation_timestamp": "2026-09-16T23:08:22.267263Z"} 2026-09-16T23:08:22.267263+00:00 https://vulnerability.circl.lu/sighting/4772a0c1-b828-4957-b528-7afdc3121849/export 2026-09-16T23:18:42.849284+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4772a0c1-b828-4957-b528-7afdc3121849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mvoaj3p3pn2x", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2026-87886: Acronis Backup Incorrect Default Permissions Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2026-87886", "creation_timestamp": "2026-09-16T22:59:21.786883Z"} 2026-09-16T22:59:21.786883+00:00 https://vulnerability.circl.lu/sighting/95335b28-ca6c-4d05-bee1-b168e8cfeb5d/export 2026-09-16T23:18:42.849479+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "95335b28-ca6c-4d05-bee1-b168e8cfeb5d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5c238c9c-ce9f-448b-b2cf-c1ad073c5b59", "content": "", "creation_timestamp": "2026-09-16T22:00:31.884662Z"} 2026-09-16T22:00:31.884662+00:00 https://vulnerability.circl.lu/sighting/b24c8dbf-2104-4ac4-afe2-01b0f408c1f2/export 2026-09-16T23:18:42.849598+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b24c8dbf-2104-4ac4-afe2-01b0f408c1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mvnwkf3jhf2y", "content": "~Cisa~\nCISA added Cisco ISE and Acronis Backup flaws to its KEV Catalog, citing active exploitation.\n-\nIOCs: CVE-2026-76460, CVE-2026-87886\n-\n#CVE-2026-76460 #CVE-2026-87886 #ThreatIntel", "creation_timestamp": "2026-09-16T20:01:07.750691Z"} 2026-09-16T20:01:07.750691+00:00 https://vulnerability.circl.lu/sighting/d5c3e9b6-c8e6-4cac-9ba0-60078b4c976d/export 2026-09-16T23:18:42.849701+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d5c3e9b6-c8e6-4cac-9ba0-60078b4c976d", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/320a50a7-980d-4162-b090-c53849c01837", "content": "", "creation_timestamp": "2026-09-16T20:00:02.744830Z"} 2026-09-16T20:00:02.744830+00:00 https://vulnerability.circl.lu/sighting/23be4f7b-799e-40fe-b16f-891498ae4dbe/export 2026-09-16T23:18:42.849808+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "23be4f7b-799e-40fe-b16f-891498ae4dbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mvnvfayz252g", "content": "\ud83d\uded1 CVE-2026-87886\nAcronis Backup\nKEV \u2705\nTL;DR: Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerabil\u2026\nhttps://cvesentinel.com/report/CVE-2026-87886?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-09-16T19:40:21.824730Z"} 2026-09-16T19:40:21.824730+00:00 https://vulnerability.circl.lu/sighting/38fcb8cd-381c-4310-b751-9afc27ebd401/export 2026-09-16T23:18:42.849905+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "38fcb8cd-381c-4310-b751-9afc27ebd401", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://t.me/information_security_channel/55925", "content": "Acronis Patches Exploited Vulnerability in cPanel Backup Plugin\nhttps://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/\n\nCVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin (https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2026-09-16T17:00:05.056529Z"} 2026-09-16T17:00:05.056529+00:00 https://vulnerability.circl.lu/sighting/1ef32032-2d6d-48e9-bfb3-b20b74f21296/export 2026-09-16T23:18:42.850017+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1ef32032-2d6d-48e9-bfb3-b20b74f21296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.acn.gov.it/portale/w/acronis-rilevato-sfruttamento-in-rete-della-cve-2026-87886", "content": "Rilevato lo sfruttamento attivo in rete della vulnerabilit\u00e0 CVE-2026-87886 \u2013 gi\u00e0 sanata dal vendor \u2013 che interessa i plugin di backup Acronis per Plesk, cPanel e WHM. Tale vulnerabilit\u00e0, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di elevare i propri privilegi sui sistemi interessati.", "creation_timestamp": "2026-09-16T16:00:42.866761Z"} 2026-09-16T16:00:42.866761+00:00 https://vulnerability.circl.lu/sighting/46ed23a1-65ad-4aa5-88e2-01801b4774f1/export 2026-09-16T23:18:42.850116+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "46ed23a1-65ad-4aa5-88e2-01801b4774f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://thehackernews.com/2026/09/acronis-cpanel-backup-plugin.html", "content": "Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel and Web Host Manager (WHM) deployments has been exploited in the wild.\n\nThe vulnerability, tracked as CVE-2026-87886 (CVSS score: 7.8), is described as a case of local privilege escalation due to insecure file permissions. It affects the following versions -\n\n\n Acronis Backup plugin for cPanel & WHM (Linux", "creation_timestamp": "2026-09-16T13:00:40.275443Z"} 2026-09-16T13:00:40.275443+00:00 https://vulnerability.circl.lu/sighting/046c8436-3175-4252-b5b7-3c583e97eac2/export 2026-09-16T23:18:42.850208+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "046c8436-3175-4252-b5b7-3c583e97eac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-87886", "type": "seen", "source": "https://www.securityweek.com/acronis-patches-exploited-vulnerability-in-cpanel-backup-plugin/", "content": "CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.\n\nThe post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.", "creation_timestamp": "2026-09-16T13:00:39.790136Z"} 2026-09-16T13:00:39.790136+00:00