CVE-2026-64636

WebPros / Plesk PUBLISHED

Description (CNA)

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

Affected (CNA)

Vendor / product	Versions
WebPros / Plesk	affected 18.0.51 before 18.0.80.1

CWE

No CWE identifiers supplied.

References

https://support.plesk.com/hc/en-us/articles/42431868205079

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.