Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-87898

OS Command Injection Allowing Remote Authenticated Users to Execute Code with Root Privileges

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.

CVSS 4.0 · 9.4 Critical EPSS 1.1% KEV · Not listed
Vendors
Webpros
Products
Plesk Site Import
CVE-2026-65647

Arbitrary Code Execution via Symlink Resolution in Plesk Site Import and Migrator

Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Webpros
Products
Plesk Migrator Plesk Site Import