Plesk CVE-2026-65642: Insecure Direct Object Reference
Plesk is affected by CVE-2026-65642. Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases. Affected versions: 0 – 18.0.79.7 | 18.0.80 before 18.0.80.4. CVSS base score: 8.6.
Затронутые версии
0 – 18.0.79.7 | 18.0.80 before 18.0.80.4
Команда обновления по умолчанию
plesk installer --select-release-current --reinstall-patchКоманды исправления
AlmaLinux / Ubuntu / Debian / CloudLinux / Rocky Linux
plesk installer --select-release-current --reinstall-patch
plesk versionЧто это значит по лицензии SharedLicense
Your SharedLicense Plesk license itself is not affected — this is a vulnerability in Plesk, not in licensing. Licenses continue to work during and after the update; there is no need to re-issue or re-activate anything. If you resell under your own brand, patch client servers too — unpatched installs put your reputation at risk, not your license.
Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers’ databases.
Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-65642
Часто задаваемые вопросы
What is CVE-2026-65642?
Is CVE-2026-65642 being exploited in the wild?
How do I fix CVE-2026-65642?
Which versions are affected?
Предупреждения о безопасности
Похожие предупреждения
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему