PL
Product
Plesk
14
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 4Medium 0Low 0
Watch
Add Plesk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-68492 | 8.7 | Sep 23 | An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via… Affected: 18.0.34 before 18.0.80.8; 18.0.81 before 18.0.81.1 |
| CVE-2026-65642 | 8.6 | Aug 26 | Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases Affected: through 18.0.79.7; 18.0.80 before 18.0.80.4 |
| CVE-2026-67397 | 8.5 | Sep 3 | Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root Affected: before 18.0.79.9; 18.0.80 before 18.0.80.5 |
| CVE-2026-64636 | 7.7 | Aug 7 | An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database Affected: 18.0.51 before 18.0.80.1 |
Showing 4