Vulnerability Description
A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access (or allowed to change their own shell access) to elevate privileges to the root account on the hosting server.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-67394?
CVE-2026-67394 is a documented vulnerability. A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerabili...
How severe is CVE-2026-67394?
CVSS scoring is not yet available for CVE-2026-67394. Check NVD for updates.
Is there a patch for CVE-2026-67394?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.