CVE-2026-68492 : 상세 정보

CVE-2026-68492

2026-09-23
20h17 +00:00
A08-Soft and Data Integrity Fail
2026-09-24
21h16 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the "Plesk RESTful API" extension from 2.4.2 before 2.4.7.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-426 Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

참고 자료