Your Backup Agent Can Root Your cPanel Box — And Someone Already Did (Acronis CVE-2026-87886)
Insecure file permissions in Acronis's cPanel & WHM plugin and Plesk extension let a low-privilege local user escalate to root. Exploited in the wild in limited, targeted attacks; fixed builds are out now.