WebPros Plesk vulnerabilities

Newest CVEs

• CVE-2026-68492

  An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute…

  WebPros · Plesk

  High8.7
• CVE-2026-68487

  Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

  WebPros · Plesk

  Critical9.9
• CVE-2026-68488

  A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary…

  WebPros · Plesk

  Critical9.9
• CVE-2026-67397

  Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.

  WebPros · Plesk

  High8.5
• CVE-2026-67394

  A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before…

  WebPros · Plesk

  Critical9.0
• CVE-2026-65646

  Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files…

  WebPros · Plesk

  Critical9.9
• CVE-2026-65642

  Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other…

  WebPros · Plesk

  High8.6
• CVE-2026-64639

  Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary…

  WebPros · Plesk

  Critical9.3
• CVE-2026-64637

  Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root…

  WebPros · Plesk

  Critical9.9
• CVE-2026-64636

  An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel…

  WebPros · Plesk

  High7.7