Source: GBHackers

2 stories in the last 24h

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 6 Vulnerability 3 Industry 3 Advisory 3 Tools 2 AI safety & security 2 Phishing & fraud 2 Exploit / PoC 2 Threat actor 1 Data breach 1

SeverityAll critical 0 high 10 medium 7 low 0 info 8 source: GBHackers ✕

Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges

Acronis patched CVE-2026-87886 (CVSS 7.8), a local privilege escalation flaw in its cPanel & WHM backup plugin already exploited in targeted attacks.

Acronis released an urgent update for CVE-2026-87886 (CVSS 7.8), an insecure file permissions issue (CWE-276) in its Backup plugin for cPanel & WHM that lets a low-privileged local user elevate privileges on Linux servers. The company confirmed exploitation in limited, targeted attacks against cPanel & WHM deployments; the Plesk extension is also affected but no exploitation was observed there. Fixes are version 1.9.3 HF3 (build 1.9.3.1021 or later) for cPanel & WHM and 1.8.11 (build 1.8.11.638 or later) for Plesk.

GBHackersupdated 11:08 UTC · 4h agofirst 09:57 UTC · 5h agoExploit / PoC in the wild 6 sources CVE-2026-87886

Apache Superset SQL Injection Flaw Gets Public PoC Exploit

A public Python proof-of-concept exploit was released for CVE-2026-23980, an authenticated error-based SQL injection flaw in Apache Superset before 6.0.0.

A public proof-of-concept exploit repository now targets CVE-2026-23980, an error-based SQL injection affecting Apache Superset versions from 0.0.0 up to but not including 6.0.0. An authenticated user with read access can inject SQL through the sqlExpression or where parameters, potentially reaching business, customer, and security data depending on database configuration and privileges. Apache disclosed the flaw in February and urges upgrading to Superset 6.0.0; compensating controls include least-privilege database accounts, network restrictions, and log monitoring.

GBHackers09:23 UTC · 5h agoExploit / PoC 2 sources CVE-2026-23980