ACRONIS WARNS OF ACTIVELY EXPLOITED CPANEL PLUGIN FLAW

SECURITY DESK■ 1 MIN READ

TUE, SEP 15, 2026

■ AI-SUMMARIZED FROM 1 SOURCE ▸ TIMELINE

Acronis has disclosed a high-severity Linux privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that attackers are actively exploiting in the wild.

The vulnerability allows local users to gain elevated privileges on affected systems. Acronis rated the flaw as high-severity, indicating significant risk to hosting providers and server administrators using the plugin. The backup plugin is widely deployed across hosting infrastructure, making the active exploitation particularly concerning. System administrators running cPanel, WHM, or Plesk installations should prioritize patching to prevent unauthorized access and privilege escalation attacks. Acronis has released updates to address the vulnerability. Users should check Acronis's security advisories for affected versions and apply patches immediately. The active exploitation in the wild underscores the need for rapid deployment of fixes across hosting environments.

■ SOURCES

► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P476RESEARCHER GAINS ADMIN ACCESS TO BASETEN'S GITHUB IN 25 MINUTES

A security researcher demonstrated a critical vulnerability in Baseten's infrastructure, obtaining full administrative access to the company's production GitHub account in under half an hour. The exploit highlights widespread risks in how companies manage authentication tokens.

JUST NOW— Dev Desk

P474DRIVER'S LICENSE BREACH POSES NATIONAL SECURITY RISK

A significant breach of America's driver's license data has exposed millions of citizens to identity theft and security threats. Experts warn the incident represents a critical vulnerability in national security infrastructure.

JUST NOW— Security Desk

P467WORDPRESS PLUGIN BACKDOOR HITS 1,500+ SITES

A compromised Admin Menu Editor Pro plugin distributed malicious updates to over 200 customers, creating hidden administrator accounts on approximately 1,500 WordPress sites. A threat actor gained access to the plugin maintainer's website and pushed weaponized versions.

1H AGO— Industry Desk

P455DIGITAL DRIVER'S LICENSES RAISE PRIVACY RISKS

Storing your driver's license in Apple Wallet or Google Wallet offers convenience, but carries significant privacy and security implications worth understanding before you make the switch.

3H AGO— Security Desk

◄ BACK TO NEWS

ACRONIS WARNS OF ACTIVELY EXPLOITED CPANEL PLUGIN FLAW

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF