CVE-2024-8767: Acronis Backup Extension For Plesk

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis Backup extension for Plesk (Linux) before build 555, Acronis Backup plugin for DirectAdmin (Linux) before build 147.

Affected products

• Acronis Acronis Backup Extension For Plesk: before 555 (fixed in 555)
• Acronis Acronis Backup Plugin For cPanel & WHM: before 619 (fixed in 619)
• Acronis Acronis Backup Plugin For Directadmin: before 147 (fixed in 147)
• Acronis Backup Extension For Plesk: before 555 (fixed in 555)
• Acronis Backup Plugin For cPanel \& WHM: before 619 (fixed in 619)
• Acronis Backup Plugin For Directadmin: before 147 (fixed in 147)

Published 2024-09-17. Last modified 2026-06-17.