Security Advisory: Three New Security Vulnerabilities in Plesk

This advisory is provided as a courtesy. We want to bring to your attention three newly discovered vulnerabilities in the Plesk hosting control panel. Vulnerability in Plesk's DNS zone management functionality CVE-2026-65646 A customer with a DNS managed domain can read arbitrary files from the server and obtain administrative credentials. Successful exploitation discloses Plesk ...

Security Advisory: New WHM/cPanel Vulnerability - Privilege Escalation via Phusion Passenger's Watchdog API

This advisory is provided as a courtesy. We want to bring to your attention a newly discovered security vulnerability in the WHM/cPanel hosting control panel. The vulnerability affects the Phusion Passenger's Watchdog API component in WHM/cPanel. Note:This vulnerability does not affect default installations of WHM/cPanel. This vulnerability is only applicable to servers where an affected ...

Security Advisory: New Plesk Vulnerability - Privilege Escalation via Phusion Passenger's Watchdog API

This advisory is provided as a courtesy. We want to bring to your attention a newly discovered security vulnerability in all versions of the Plesk hosting control panel. The vulnerability affects the Phusion Passenger's Watchdog API component in Plesk. Impact Local privilege escalation is possible. Affected Software Plesk for Linux Affected versions: All versions prior to ...