High severityNVD Advisory· Published Aug 26, 2026

CVE-2026-65642

Description

Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases.

Affected products

Plesk/Pleskllm-fuzzy
Range: <=18.0.79.7, 18.0.80-18.0.80.3

Patches

Vulnerability mechanics

References

support.plesk.com/hc/en-us/articles/42844242102679-Vulnerability-CVE-2026-65642-in-Plesk-s-database-management-interfacenvd

News mentions

No linked articles in our index yet.

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000