CVE-2026-65646

CVSS 9.9 (critical) · published 2026-08-26

Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privileges.

Weakness: CWE-74

Source: NVD CVE-2026-65646

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.