In September 2024, a critical vulnerability CVE-2024-8767 (rated 9.9 by CVSS) was discovered, impacting Acronis Backup plugins on cPanel, WHM, Plesk, and DirectAdmin platforms running on Linux. The issue lies in excessive privileges, allowing attackers to remotely expose and modify sensitive data, as well as perform unauthorized operations. The vulnerability affects plugin builds up to 619 (cPanel), 555 (Plesk), and 147 (DirectAdmin). The importance of updating cannot be overstated: users who do not apply patches risk complete system compromise.
Security experts strongly recommend updating systems as soon as possible, especially if Acronis Backup plugins are used to protect critical data.
Source: linux.org.ru
