CVE-2026-87898
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.
| CWE | CWE-78 |
| Vendor | webpros |
| Product | plesk extension "site import" |
| Published | Sep 23, 2026 |
| Last Updated | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for webpros plesk extension "site import"
Be the first to know when new unknown vulnerabilities affecting webpros plesk extension "site import" are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
WebPros / Plesk extension "Site Import"
1.6.6 ≤ 1.12.1
References
Credits
Ali Mustafa (rz1027)