CVE-2026-64636

—

CVSS 3.1

7.7 high

EPSS

<1%p17

Published

Aug 7, 2026 (Aug 7, 2026)

Modified

Sep 3, 2026

Description

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.