Security Advisory
CVE-2026-67394
N/A
UNKNOWN
Vulnerability Description
A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting all versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. The vulnerability allows a customer or reseller with shell access (or allowed to change their own shell access) to elevate privileges to the root account on the hosting server.
Published Date
September 1, 2026
Official Source
NIST NVD Advisory