A privilege escalation bug in Acronis backup extensions for cPanel and WHM is under limited, targeted attack against hosting infrastructure.
One cPanel account with mail rights could reach root on a shared server before this week's fix.
A critical cPanel and WHM bug turns authenticated tenants into server root users.
Attackers have exploited an authentication bypass in cPanel and WHM since February 2026, with widespread scanning for vulnerable servers detected…