A privilege escalation bug in Acronis backup extensions for cPanel and WHM is under limited, targeted attack against hosting infrastructure.
One cPanel account with mail rights could reach root on a shared server before this week's fix.
A critical cPanel and WHM bug turns authenticated tenants into server root users.