Critical SEVERITY — Vulnerability

CVE-2025-66430 — Plesk 18.0 has Incorrect Access Control.

Plesk 18.0 has Incorrect Access Control.

Platform

Plesk

CVE Record

CVE-2025-66430

CVSS Score

9.1/10

Published

12 December 2025

Views

Summary

Plesk 18.0 has Incorrect Access Control.

Assessment

CVE: CVE-2025-66430
CVSS taban puanı: 9.1
Vektör: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Kaynak: NVD kaydı

References

Action

Etkilenen sistemleri envanterden doğrulayın
Üretici yamasını bakım penceresinde uygulayın
Yama uygulanana kadar erişimi ağ katmanında kısıtlayın

Plesk — Related Advisories

VIEW ALL →

Plesk 14 Sep 2026

High · 8.7

CVE-2026-68489 — Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authentic

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.

CVE-2026-68489 Vulnerability 24

Plesk 26 Aug 2026

High · 8.7

CVE-2026-65646 — Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files

Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files and escalate privileges.

CVE-2026-65646 Vulnerability 25

Plesk 26 Aug 2026

High · 8.7

CVE-2026-65647 — Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as r

Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root.

CVE-2026-65647 Vulnerability 26