Parallels Desktop flaw hands any local user root on a Mac (CVE-2026-90894)

2026-09-16T14:51:42Z•68cd380732884183eaff5e6f79f5f41e9950a9b020d907bfe224167bef1d2f4a

CVE-2026-87886CVE-2026-90894AI-securityAcronisCHOSEN BRICKCenterPoint EnergyIranLinuxParallels DesktopPleskWHMactively-exploitedbackup-softwarecPanelcyber-espionagedata-breachdissidentsjournalistslocal-privilege-escalationmacOSmalwareprompt-injectionstate-sponsoredsupply-chain-riskvulnerability

Open source link →

What happened

Security news feed covering a critical Parallels Desktop local privilege-escalation vulnerability (CVE-2026-90894), an actively exploited Acronis backup plugin flaw (CVE-2026-87886), Iranian state-sponsored CHOSEN BRICK malware targeting dissidents and journalists, a confirmed CenterPoint Energy data breach, and emerging risks involving autonomous AI agents and indirect prompt injection.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: helpnetsecurity
Record identifier: 68cd380732884183eaff5e6f79f5f41e9950a9b020d907bfe224167bef1d2f4a
Enrichment time: 2026-09-16T14:51:42Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records