CVE-2026-68492

Vulnerability Description

An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7.

Related Weaknesses (CWE)

CWE-426

References

https://support.plesk.com/hc/en-us/articles/43644058632983

FAQ

What is CVE-2026-68492?

CVE-2026-68492 is a documented vulnerability. An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful AP...

How severe is CVE-2026-68492?

CVSS scoring is not yet available for CVE-2026-68492. Check NVD for updates.

Is there a patch for CVE-2026-68492?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.