CVE-2026-68489
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.
| CWE | CWE-96 |
| Vendor | webpros |
| Product | plesk extension "ruby" |
| Published | Sep 14, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for webpros plesk extension "ruby"
Be the first to know when new unknown vulnerabilities affecting webpros plesk extension "ruby" are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WebPros / Plesk extension "Ruby"
0 < 1.6.6
WebPros / Plesk extension "Node.js Toolkit"
0 < 2.5.0
References
Credits
d1n4h