CVE-2026-64639
9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Summary
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| WebPros | Plesk | 18.0.52 < 18.0.79.6 | affected |
| WebPros | Plesk | 18.0.80.0 < 18.0.80.2 | affected |
Weaknesses
- CWE-266: CWE-266 Incorrect Privilege Assignment
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.