CVE Catalog
CVE-2026-64639
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.
Risk Assessment
A user with limited privileges can gain full control over the database server, potentially leading to data integrity and confidentiality breaches.
Recommendation
Update Plesk to version 18.0.79.6 or 18.0.80.2, which include the fix.
Original NVD description (English source)
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.