Acronis Plugin Security Advisory (SEC-10986) -cPanel/Plesk

Event timeline

How this incident unfolded, from the official status page.

1. Identified

   about 1 month ago

   Liquid Web

   We are aware of the recent security advisory (SEC-10986) regarding the Acronis Cyber Protect Backup plugin for hosting control panels (cPanel/Plesk). Our Engineers are actively evaluating the impact across our fleet and verifying plugin versioning. We are conducting a thorough audit to confirm full patch coverage, identify any edge cases that require manual updates, and ensure that all managed systems remain secure. Service Disruption: None. Backups and control panel operations remain fully functional. We are actively auditing server inventory alongside our engineering teams. Further updates will be provided as soon as the fleet-wide verification is complete

2. Identified

   about 1 month ago

   Liquid Web

   The security patch for CVE-2026-87886 (SEC-10986) is being applied across the affected Acronis Cyber Protect Backup plugin. Our engineers continue to monitor the environment and validate the patched systems. We have not observed any new issues since our last update run. We will provide further updates as needed. Thank you for your patience and understanding.

3. Monitoring

   about 1 month ago

   Liquid Web

   The security patch for CVE-2026-87886 (SEC-10986) is applied across the affected Acronis Cyber Protect Backup plugins. Our Engineering team continues to monitor the environment and validate the patched systems. We have not observed any new issues since our last update. If you need assistance or have any concerns, please get in touch with our Support team.

4. Resolved

   about 1 month ago

   Liquid Web

   This incident has been resolved.