critical9.9
CVE-2026-64637
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root use…
Impact
Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative session for the root user account.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plesk | Plesk | before 18.0.80 |
Versions were read from the advisory text. No structured product data has been published for this record yet.