Serial number: AV26-961Date: September 24, 2026 As of September 23, 2026, WebPros is affected by vulnerabilities in the following products: Plesk Versions 18.0.34 to 18.0.80.7 Version 18.0.81.0 Plesk extension "Plesk RESTful API" Versions 2.4.2 to 2.4.6 Plesk extension "Site Import" Prior to or equal to 1.12.1 WP Toolkit for cPanel Prior to or equal to 6.11.2-10794 cPanel/WHM Prior to 11.134.0.57 Prior to 11.136.0.41 Prior to 11.138.0.8 The Cyber Centre encourages users and administrators to…
Classification: Severe, Solution: Official Fix, Exploit Maturity: High, CVSSv3.0: 7.8, CVEs: CVE-2026-87886, Summary: Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin for cPanel & WHM deployments. Affected products Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.3.1021 Acronis Backup extension for Plesk (Linux) before build 1.8.11.638
Aggiornamenti di sicurezza risolvono una vulnerabilità con gravità "alta" in Plesk, software per la gestione di server web. Tale vulnerabilità, qualora sfruttata, potrebbe consentire ad un utente malintenzionato di eseguire codice arbitrario sui sistemi interessati.
Serial number: AV26-866Date: September 1, 2026 As of September 1, 2026, WebPros is affected by vulnerabilities in the following product: Plesk Prior to 18.0.79.9 Prior to 18.0.80.5 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. CVE-2026-67394: Vulnerability in Plesk allows privilege escalation to root
Aggiornamenti di sicurezza risolvono una vulnerabilità in Plesk, software per la gestione di server web. Tale vulnerabilità, presente nel componente APS Catalog, qualora sfruttata potrebbe consentire ad un utente autenticato malintenzionato di elevare i propri privilegi sui sistemi interessati.