← CVE Intelligence

CVE-2026-68489

WebPros / Plesk extension "Ruby" PUBLISHED

Description (CNA)

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.

Affected (CNA)

Vendor / productVersions
WebPros / Plesk extension "Ruby"affected 0 before 1.6.6
WebPros / Plesk extension "Node.js Toolkit"affected 0 before 2.5.0

CWE

CWE-96

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.