Skip to content
OpenAdvisories
High · 7.7 CVE-2026-64636 EUVD-2026-54562GHSA-j4xg-65wf-c7hr

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data fr…

Published Aug 7, 2026 · Updated Aug 7, 2026 · Assigned by hackerone

Description

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

Affected products

VendorProductAffectedFixed
WebPros Plesk 18.0.51 – < 18.0.80.1 18.0.80.1

References