Acronis Backup Extension For Plesk vulnerabilities

3 CVEs affecting Acronis Backup Extension For Plesk, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-24832, published 2025-02-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-8767, published 2024-09-17. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. Sensitive data disclosure and manipulation due to unnecessary privileges assignment. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 619, Acronis…
CVE-2024-34014, published 2024-11-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.3.818, Acronis…
CVE-2025-24832, published 2025-02-27. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build…