CVE-2026-82977: High severity vulnerability
Published Nov 12, 2026
·Updated
The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-subscription information disclosure.
Event History
Nov 12, 2026
CVE Published
via MITRE·05:01 PM
Data Sourced
via MITRE·05:01 PM
DescriptionWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which installations are affected?
The issue affects Plesk Obsidian for Linux installations using the GoAccess statistics integration in versions 18.0.77 through 18.0.81.7 and 18.0.82 through 18.0.82.2.
2
What information can be exposed?
The vulnerability allows disclosure of information across subscriptions. The provided information does not identify the specific data types that may be disclosed.