Security Advisory
CVE-2026-58046
9.9
CRITICAL
Vulnerability Description
Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel.
Published Date
July 30, 2026
Official Source
NIST NVD Advisory