Beveiligingsadvies

CVE-2026-67394

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-01 02:07:41
Laatst bijgewerkt 2026-09-01 13:14:45
Toegewezen door hackerone
CVSS-score 9.0
Status PUBLISHED

Beschrijving

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access (or allowed to change their own shell access) to elevate privileges to the root account on the hosting server.