← CVE Intelligence

CVE-2026-64637

WebPros / Plesk PUBLISHED

Description (CNA)

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.

Affected (CNA)

Vendor / productVersions
WebPros / Pleskaffected 0 before 18.0.80.1

CWE

CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.