๐Ÿ” CVE Alert

CVE-2026-64639

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.

CWE CWE-266
Vendor webpros
Product plesk
Published Aug 12, 2026
Stay Ahead of the Next One

Get instant alerts for webpros plesk

Be the first to know when new unknown vulnerabilities affecting webpros plesk are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

WebPros / Plesk
18.0.52 < 18.0.79.6 18.0.80.0 < 18.0.80.2

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
support.plesk.com: https://support.plesk.com/hc/en-us/articles/42521305418903-Vulnerability-CVE-2026-64639-Privilege-Escalation-via-Database-Cloning-in-Plesk

Credits

Aziz Knani