WebPros security advisory (AV26-866)
Canada's Cyber Centre relays a WebPros advisory for CVE-2026-67394, a Plesk privilege escalation flaw to root, fixed in 18.0.79.9 and 18.0.80.5.
The Canadian Centre for Cyber Security issued alert AV26-866 relaying WebPros' security advisory for Plesk. CVE-2026-67394 allows privilege escalation to root and affects Plesk versions prior to 18.0.79.9 and 18.0.80.5. Administrators are encouraged to review the advisory and apply the available updates.
- CVE-2026-67394 enables privilege escalation to root in Plesk
- Affected versions are prior to 18.0.79.9 and 18.0.80.5
- Issued as Canadian Cyber Centre alert AV26-866 on September 1, 2026
- Users and administrators urged to apply updates
- CVEs
- CVE-2026-67394
- Products
- Plesk
- Organizations
- WebProsCanadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-67394 | Command Injection Local Privilege Escalation in Plesk for Linux | 9.0 | 1% |
From the original article
Serial number: AV26-866 Date: September 1, 2026 As of September 1, 2026, WebPros is affected by vulnerabilities in the following product: Plesk Prior to 18. 0. 79.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.