Security Advisory

CVE-2026-67394

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-01 02:07:41

Last updated 2026-09-01 02:07:41

Assigner hackerone

CVSS score 9.0

State PUBLISHED

Description

A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access (or allowed to change their own shell access) to elevate privileges to the root account on the hosting server.

← Browse all CVEs View on cve.org ↗