{"product":"plesk","productName":"Plesk","version":"17.8.11.95","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2021-04-20","cycle":"17"},"counts":{"critical":8,"high":4,"medium":0,"low":0,"unknown":0},"vulnerabilities":[{"id":"CVE-2026-68488","severity":"critical","score":9.9,"kev":false,"advisoryUrl":"https://support.plesk.com/hc/en-us/articles/43248932867351-Vulnerability-in-Plesk-s-Backup-Manager-symlink-race-during-restore-allows-root-privilege-escalation"},{"id":"CVE-2026-68487","severity":"critical","score":9.9,"kev":false,"advisoryUrl":"https://support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversal"},{"id":"CVE-2026-65646","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.79.11","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42877023875351-Vulnerability-CVE-2026-65646-in-Plesk-s-DNS-zone-management-functionality"},{"id":"CVE-2026-64637","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.80.1","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42432168683799"},{"id":"CVE-2026-58046","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.79.4","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42139500580119-Vulnerability-CVE-2026-58046-Blind-SQL-injection-in-Plesk-s-XML-RPC-API"},{"id":"CVE-2026-56843","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.78.4","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/41178305151255-Vulnerability-in-Plesk-XML-API-Cleartext-FTP-Password-Exposure"},{"id":"CVE-2026-48614","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.78","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/41171817973143-Vulnerability-in-Plesk-XML-API"},{"id":"CVE-2026-44962","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.75.1","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/38633651286679-Vulnerability-CVE-2026-44962-in-Plesk-s-APS-Catalog"},{"id":"CVE-2023-0829","severity":"high","score":8.8,"kev":false,"advisoryUrl":"https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-plesk"},{"id":"CVE-2026-65642","severity":"high","score":8.6,"kev":false,"fixedIn":"18.0.80.4","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42844242102679-Vulnerability-CVE-2026-65642-in-Plesk-s-database-management-interface"}],"moreVulnerabilities":2,"upgrade":{"recommended":"18.0.80.11"},"notes":[],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T20:37:53.582Z"}