{"id":"CVE-2025-24832","aliases":["EUVD-2025-5492","GHSA-qc2q-hwc8-26rv"],"status":"published","title":"Arbitrary file overwrite during home directory recovery due to improper symbolic link handling....","description":"Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.","severity":{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00195,"percentile":0.09356,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-61"],"published":"2025-02-27T23:00:16Z","modified":"2026-06-17T08:59:40Z","products":[{"vendor":"acronis","product":"acronis backup extension for plesk"},{"vendor":"acronis","product":"acronis backup plugin for cpanel \u0026 whm"}],"references":[{"url":"https://security-advisory.acronis.com/advisories/SEC-7649","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24832"},{"url":"https://github.com/advisories/GHSA-qc2q-hwc8-26rv"}],"sources":{"cve":[{"id":"CVE-2025-24832","description":"Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.","status":"published","published":"2025-02-27T23:00:16.679Z","modified":"2025-02-28T15:00:45.368Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:32:43.770144Z"}],"euvd":[{"id":"EUVD-2025-5492","description":"Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.","status":"published","published":"2025-02-27T23:00:16Z","modified":"2025-02-28T15:00:45Z","cvss":[{"version":"3.0","score":4.4,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:53:19.898689Z"}],"ghsa":[{"id":"GHSA-qc2q-hwc8-26rv","title":"Arbitrary file overwrite during home directory recovery due to improper symbolic link handling....","description":"Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.","status":"published","published":"2025-02-28T00:30:52Z","modified":"2025-02-28T00:31:01Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T15:00:05.050542Z"}],"nvd":[{"id":"CVE-2025-24832","description":"Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel \u0026 WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.","status":"published","published":"2025-02-27T23:15:37.31Z","modified":"2026-06-17T08:59:40.987Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-61"],"updated_at":"2026-11-02T14:10:52.398004Z"}]}}