CVE-2026-65646

No fix known EPSS <1%CVSS 9.9

Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privileges.

Published 2026-08-26 · CVE record · OSV

Products: WebPros Plesk