CVE-2026-64636

No fix known EPSS <1%CVSS 7.7

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.