← All advisories

Critical severity9.9NVD Advisory· Published Sep 10, 2026· Updated Sep 10, 2026

CVE-2026-68487

CVE-2026-68487

Description

Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

Affected products

2

Plesk/Pleskllm-fuzzy
Plesk/Backup Managerllm-fuzzy

Patches

Vulnerability mechanics

References

1

support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversalnvd

News mentions

0

No linked articles in our index yet.