CVE Alert & Security Feed

Stats Digest Feeds

← Back to all CVEs

CVE-2026-68487

CRITICAL NVD

CVSS Score 9.9

Severity CRITICAL

Published Sep 10, 2026

Vendor unknown

Description

Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

References

https://support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversal