CVE-2026-65646

WebPros / Plesk PUBLISHED

Description (CNA)

Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privileges.

Affected (CNA)

Vendor / product	Versions
WebPros / Plesk	affected 0 before 18.0.79.11; affected 18.0.80 before 18.0.80.7

CWE

CWE-74

References

https://support.plesk.com/hc/en-us/articles/42877023875351-Vulnerability-CVE-2026-65646-in-Plesk-s-DNS-zone-management-functionality

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.