high8.6
CVE-2026-65642
Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other custom…
Impact
Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Plesk | Plesk 18.0.79.7 And Earlier Or 18.0.80 | through 18.0.80.3 |
Versions were read from the advisory text. No structured product data has been published for this record yet.