Description
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WebPros | Plesk | < 18.0.79.9, 18.0.80 – < 18.0.80.5 | 18.0.79.9 |
High · 8.5
CVE-2026-67397
EUVD-2026-70851GHSA-pm4q-j54p-8jgq
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.
Published Sep 3, 2026 · Updated Sep 4, 2026 · Assigned by hackerone