Plesk RESTful API

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 24, 2026
Last mentionedSep 24, 2026

Timeline

1 articles · newest first

WebPros security advisory (AV26-961)

Canada's Cyber Centre urges patches for root code-execution flaws in Plesk, cPanel, and WebPros extensions.

Canadian Centre for Cyber SecuritySep 24, 14:43 UTC · Sep 24, 2026AdvisoryCVE-2026-68492 CVE-2026-87898 CVE-2026-87899+17 · 1 read

Related CVEs

by mentions

CVE-2026-878999.4
Authenticated Privilege Escalation to Root RCE in cPanel & WHM
published Sep 23, 2026cPanel, L.L.C. cPanel & WHM
CVE-2026-878989.4
Authenticated OS Command Injection in Plesk Yields Root Code Execution
published Sep 23, 2026Plesk (WebPros) Plesk hosting control panel
CVE-2026-879009.4
Argument Injection in WP Toolkit for cPanel Allows Cross-Account File Read and RCE
published Sep 23, 2026Plesk / WebPros (WP Toolkit) WP Toolkit for cPanel
CVE-2026-684928.7
Authenticated Root Code Execution via Untrusted Search Path in Plesk RESTful API
published Sep 23, 2026Plesk Obsidian

Appears with

Pleskproduct · 1
WP Toolkitproduct · 1
WHMproduct · 1
WebProsvendor · 1
cPanelproduct · 1
Canadian Centre for Cyber Securityorganization · 1
Site Importproduct · 1

Entities are extracted by the model from each article. First seen Sep 24, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.