Plesk CVE-2026-68492: Untrusted Search Path
Plesk is affected by CVE-2026-68492. An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API". Affected versions: 18.0.34 before 18.0.80.8 | 18.0.81 before 18.0.81.1 | 2.4.2 before 2.4.7. Fixed in 18.0.80.8 / 18.0.81.1. CVSS base score: 8.7.
प्रभावित संस्करण
18.0.34 before 18.0.80.8 | 18.0.81 before 18.0.81.1 | 2.4.2 before 2.4.7
पैच किया गया संस्करण
18.0.80.8 / 18.0.81.1
डिफ़ॉल्ट अपडेट कमांड
plesk installer --select-release-current --reinstall-patchसुधार कमांड
AlmaLinux / Ubuntu / Debian / CloudLinux / Rocky Linux
plesk installer --select-release-current --reinstall-patch
plesk versionSharedLicense लाइसेंस के तहत इसका अर्थ
Your SharedLicense Plesk license itself is not affected — this is a vulnerability in Plesk, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.
An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the “Plesk RESTful API” extension from 2.4.2 before 2.4.7.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-68492
अक्सर पूछे जाने वाले प्रश्न
What is CVE-2026-68492?
Is CVE-2026-68492 being exploited in the wild?
How do I fix CVE-2026-68492?
Which versions are affected?
अपने सिस्टम में भेद्यताओं की जाँच करें
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
अपना सिस्टम जाँचें