CVE-2026-67394
NONE—CVSS v3
—CVSS v2
1.17%
EPSS (exploit probability)
CWE-78CWE
Description
A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access (or allowed to change their own shell access) to elevate privileges to the root account on the hosting server.
Affected routers (0)
No routers currently mapped to this CVE in our database.