cPanel prior to 68.0.15 writes home-directory backups to an incorrect location (SEC-309).
cpanel cpanel