CVE-2026-65642

WebPros / Plesk PUBLISHED

Description (CNA)

Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases.

Affected (CNA)

Vendor / product	Versions
WebPros / Plesk	affected 0 through 18.0.79.7; affected 18.0.80 before 18.0.80.4

CWE

CWE-639

References

https://support.plesk.com/hc/en-us/articles/42844242102679-Vulnerability-CVE-2026-65642-in-Plesk-s-database-management-interface

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.