Approved changes feed: RSS · Atom
cpe:2.3:a:webpros:plesk:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Webpros (3ebf8919-8933-5275-88f3-83c91ccd7db5) |
|---|---|
| Product | Plesk (00dfddea-2f52-55db-a02f-67168054fc5c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-68488 |
vulnerable | 2026-09-16 04:34:00.078760 |
Details available
CRITICAL (9.9)
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary file/directory ownership takeover.
Published: 2026-09-10T16:24:52.781Z
Updated: 2026-09-10T18:18:54.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-68487 |
vulnerable | 2026-09-16 04:33:59.394431 |
Details available
CRITICAL (9.9)
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
Published: 2026-09-10T16:24:52.847Z
Updated: 2026-09-10T18:08:51.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-64636 |
vulnerable | 2026-09-16 04:33:11.471563 |
Details available
HIGH (7.7)
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.
Published: 2026-08-07T17:57:25.451Z
Updated: 2026-08-07T18:23:52.542Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-64637 |
vulnerable | 2026-09-16 04:33:11.165005 |
Details available
CRITICAL (9.9)
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.
Published: 2026-08-07T17:57:25.500Z
Updated: 2026-08-07T18:25:40.293Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-64639 |
vulnerable | 2026-09-16 04:33:11.051435 |
Details available
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.
Published: 2026-08-12T15:31:45.624Z
Updated: 2026-08-14T18:29:23.333Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-65646 |
vulnerable | 2026-09-16 04:33:07.481029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-58046 |
vulnerable | 2026-09-16 04:32:42.665001 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-56843 |
vulnerable | 2026-07-29 01:00:29.339149 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-48614 |
vulnerable | 2026-07-29 00:55:01.560966 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44962 |
vulnerable | 2026-06-08 08:05:11.390114 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.