CVE-2026-65642
Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases.
Published: 2026-08-26 · CVSS: 8.6 · CVSS 4.0
Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and modify other customers' databases.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7