← Database

CVE-2026-64637

CRITICAL CVSS: 9.9 Published: 2026-08-07 Modified: 2026-08-07

Description

Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.

Affected Platforms

Unknown

Weakness Type

CWE-269

References