Announcement

Plesk Onyx: active support has ended — Obsidian migration

The Onyx series lifecycle is complete; remaining licenses are recommended to be upgraded to the Obsidian 18 line.

Platform

Plesk

Version

Onyx 17

Published

01 January 2022

Views

Archive Record

Plesk Onyx 17 için aktif destek dönemi tamamlanmıştır. Yeni güvenlik düzeltmeleri yalnızca Plesk Obsidian 18 için yayınlanıyor.

Upgrade Notes

In-place upgrade: via Plesk Installer
Legacy sites using the PHP 5.x handler should be processed into the inventory first
A full panel backup (pleskbackup) is mandatory before upgrade

Plesk — Related Advisories

VIEW ALL →

Plesk 14 Sep 2026

High · 8.7

CVE-2026-68489 — Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authentic

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.

CVE-2026-68489 Vulnerability 24

Plesk 26 Aug 2026

High · 8.7

CVE-2026-65646 — Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files

Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files and escalate privileges.

CVE-2026-65646 Vulnerability 24

Plesk 26 Aug 2026

High · 8.7

CVE-2026-65647 — Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as r

Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root.

CVE-2026-65647 Vulnerability 25