CVE-2026-65646: Critical severity Plesk Plesk vulnerability
Published Aug 26, 2026
·Updated
Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privileges.
Affected Software
1 affected component
Plesk Plesk
Event History
Aug 26, 2026
CVE Published
via MITRE·09:21 PM
Data Sourced
via MITRE·09:21 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeakness
Jan 3, 58666
Event
via MITRE·11:28 PM
Frequently Asked Questions
1
What level of access does an attacker need?
The issue is exploitable remotely by an authenticated user. The provided information does not indicate that unauthenticated access is sufficient.
2
Which functionality is associated with the issue?
The referenced advisory identifies Plesk's DNS zone management functionality.