← CVE Intelligence

CVE-2026-87898

WebPros / Plesk extension "Site Import" PUBLISHED

Description (CNA)

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.

Affected (CNA)

Vendor / productVersions
WebPros / Plesk extension "Site Import"affected 1.6.6 through 1.12.1; unaffected 1.12.2 before 1.12.2

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.