CVE-2026-65646: High severity Plesk Plesk vulnerability
Published Aug 26, 2026
·Updated
Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files and escalate privileges.
Affected Software
1 affected component
Plesk Plesk
Event History
Aug 26, 2026
CVE Published
via MITRE·09:21 PM
Data Sourced
via MITRE·09:21 PM
DescriptionWeakness
Data Sourced
via NVD·10:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need?
The issue is exploitable remotely by an authenticated user. The provided information does not indicate that unauthenticated access is sufficient.
2
Which functionality is associated with the issue?
The referenced advisory identifies Plesk's DNS zone management functionality.