Classification: Severe, Solution: Official Fix, Exploit Maturity: Unproven, CVSSv4.0: 9.4, CVEs: CVE-2026-68489, CVE-2026-68490, CVE-2026-68492, CVE-2026-87898, CVE-2026-87899, CVE-2026-87900, Summary: Multiple vulnerabilities affect components supplied with the Plesk and cPanel hosting-management platforms. Depending on the affected component, authenticated or local users could execute commands or code with root privileges, access another hosting account’s calendars or contacts, or modify…
Serial number: AV26-961Date: September 24, 2026 As of September 23, 2026, WebPros is affected by vulnerabilities in the following products: Plesk Versions 18.0.34 to 18.0.80.7 Version 18.0.81.0 Plesk extension "Plesk RESTful API" Versions 2.4.2 to 2.4.6 Plesk extension "Site Import" Prior to or equal to 1.12.1 WP Toolkit for cPanel Prior to or equal to 6.11.2-10794 cPanel/WHM Prior to 11.134.0.57 Prior to 11.136.0.41 Prior to 11.138.0.8 The Cyber Centre encourages users and administrators to…
Serial number: AV26-908Date: September 10, 2026 As of September 10, 2026, WebPros is affected by vulnerabilities in the following products: cPanel & WebHost Manager (WHM) software Prior to 11.110.0.143 Prior to 11.134.0.55 Prior to 11.136.0.39 Prior to 11.138.0.4 Prior to WP2: 11.138.1.9 ConfigServer Security & Firewall (CSF) software Versions 14.00 to 16.29 (CVE-2026-65638) Versions 2.15 to 16.29 (CVE-2026-65639) The Cyber Centre encourages users and administrators to review the provided web…
Serial number: AV26-866Date: September 1, 2026 As of September 1, 2026, WebPros is affected by vulnerabilities in the following product: Plesk Prior to 18.0.79.9 Prior to 18.0.80.5 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. CVE-2026-67394: Vulnerability in Plesk allows privilege escalation to root
Serial Number: AV26-861Date: August 28, 2026 As of August 27, 2026, WebPros is affected by vulnerabilities in the following products: cPanel & WebHost Manager (WHM) software Prior to 11.110.0.141 Prior to 11.134.0.53 Prior to 11.136.0.37 Prior to 11.138.0.2 Prior to WP2: 11.138.1.7 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available Security: CVE-2026-65643 Vulnerability in cPanel’s Domain Parking…
Serial number: AV26-854Date: August 27, 2026 As of August 26, 2026, WebPros is affected by vulnerabilities in the following products: Plesk Prior to 18.0.79.8 Prior to 18.0.80.4 Plesk Migrator Prior to 2.36.0 Plesk Site Import Prior to 1.12.1 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Vulnerability CVE-2026-65642 in Plesk's database management interface Vulnerability CVE-2026-65647 in Plesk's…