Plesk CVE-2026-67397: Path Traversal
Plesk is affected by CVE-2026-67397. Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root. Affected versions: before 18.0.79.9 | 18.0.80 before 18.0.80.5. CVSS base score: 8.5.
Betroffene Versionen
before 18.0.79.9 | 18.0.80 before 18.0.80.5
Standard-Update-Befehl
plesk installer --select-release-current --reinstall-patchFix-Befehle
AlmaLinux / Ubuntu / Debian / CloudLinux / Rocky Linux
plesk installer --select-release-current --reinstall-patch
plesk versionWas das unter einer SharedLicense-Lizenz bedeutet
Your SharedLicense Plesk license itself is not affected — this is a vulnerability in Plesk, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-67397
Häufig gestellte Fragen
What is CVE-2026-67397?
Is CVE-2026-67397 being exploited in the wild?
How do I fix CVE-2026-67397?
Which versions are affected?
Referenzen
Sicherheitshinweise
Verwandte Warnhinweise
System auf Schwachstellen prüfen
Wählen Sie Ihr Produkt und Betriebssystem, um die passenden Fix-Befehle zu sehen.
System prüfen