{"product":"plesk","productName":"Plesk","version":"18.0.52.3","verdict":"end_of_life","activelyExploited":false,"eol":{"isEol":true,"since":"2023-07-18","cycle":"18.0.52"},"counts":{"critical":10,"high":5,"medium":0,"low":0,"unknown":0},"vulnerabilities":[{"id":"CVE-2026-68488","severity":"critical","score":9.9,"kev":false,"advisoryUrl":"https://support.plesk.com/hc/en-us/articles/43248932867351-Vulnerability-in-Plesk-s-Backup-Manager-symlink-race-during-restore-allows-root-privilege-escalation"},{"id":"CVE-2026-68487","severity":"critical","score":9.9,"kev":false,"advisoryUrl":"https://support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversal"},{"id":"CVE-2026-65646","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.79.11","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42877023875351-Vulnerability-CVE-2026-65646-in-Plesk-s-DNS-zone-management-functionality"},{"id":"CVE-2026-64637","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.80.1","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42432168683799"},{"id":"CVE-2026-58046","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.79.4","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42139500580119-Vulnerability-CVE-2026-58046-Blind-SQL-injection-in-Plesk-s-XML-RPC-API"},{"id":"CVE-2026-56843","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.78.4","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/41178305151255-Vulnerability-in-Plesk-XML-API-Cleartext-FTP-Password-Exposure"},{"id":"CVE-2026-48614","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.78","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/41171817973143-Vulnerability-in-Plesk-XML-API"},{"id":"CVE-2026-44962","severity":"critical","score":9.9,"kev":false,"fixedIn":"18.0.75.1","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/38633651286679-Vulnerability-CVE-2026-44962-in-Plesk-s-APS-Catalog"},{"id":"CVE-2026-64639","severity":"critical","score":9.3,"kev":false,"fixedIn":"18.0.79.6","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42521305418903-Vulnerability-CVE-2026-64639-Privilege-Escalation-via-Database-Cloning-in-Plesk"},{"id":"CVE-2026-67394","severity":"critical","score":9,"kev":false,"fixedIn":"18.0.79.9","advisoryUrl":"https://support.plesk.com/hc/en-us/articles/42968165026967-CVE-2026-67394-Vulnerability-in-Plesk-allows-privilege-escalation-to-root"}],"moreVulnerabilities":5,"upgrade":{"recommended":"18.0.80.11"},"notes":[],"checkedAt":"2026-10-24","dataGeneratedAt":"2026-10-24T21:52:53.182Z"}