Acronis Acronis Backup extension for Plesk

4 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-87886unspecified – < 1.8.11.638Local privilege escalation due to insecure file permissions. The following products are affected: Acronis Backup plugin for cPanel & WHM (LiHIGH 7.80.2 %KEV
CVE-2025-24832unspecified – < 1.8.7.615Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: AcronisMEDIUM 5.50.2 %
CVE-2024-34014unspecified – < 1.8.6.599Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin MEDIUM 5.50.2 %
CVE-2024-8767unspecified – < 555Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup pluCRITICAL 9.90.5 %