Acronis cPanel Backup Plugin Flaw Is Being Exploited: The Low-Privilege Account That Can Own Your Whole Hosting Server
Acronis has confirmed limited, targeted exploitation of a 7.8-rated local privilege escalation flaw in the backup plugin that hundreds of hosting companies run on their cPanel and Plesk servers. The attack path is short: one low-privileged account on a shared box, one unpatched plugin, root on the machine that hosts everyone else. What happened On…