Acronis Backup: Acronis Backup Incorrect Default Permissions Vulnerability
Medium · CISA Known Exploited Vulnerabilities ·
What happened
Acronis Backup plugin for cPanel & WHM and extension for Plesk have incorrect default permissions, allowing privilege escalation. Known exploited; users of these products are affected.
What to do now
Apply vendor mitigations/updates immediately; verify and correct file/directory permissions; restrict access to backup interfaces; monitor for privilege escalation; follow CISA BOD 26-04; discontinue if no fix.
Original source
AI-assisted analysis, sources cited. Verify with the vendor advisory before acting.