Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-48614

Опубликовано: 06 июл. 2026
Источник: nvd
CVSS3: 9.9
EPSS Низкий

Описание

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and full privilege escalation on the underlying server.

EPSS

Процентиль: 25%
0.0033
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.9
redhat
24 дня назад

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and full privilege escalation on the underlying server.

CVSS3: 9.9
github
24 дня назад

An improper authorization vulnerability in the Plesk XML API allows an authenticated user to inject arbitrary configuration directives, resulting in arbitrary file write as root and full privilege escalation on the underlying server.

EPSS

Процентиль: 25%
0.0033
Низкий

9.9 Critical

CVSS3

Дефекты

CWE-94