PT-2026-66411 · Webpros · Plesk

CVE-2026-58046 · Publicado 2026-07-30 · Atualizado 2026-07-30

NVD

CVSS v3.1

9.9

Crítica

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-58046

Produtos afetados

Plesk

Referências · 2

• https://support.plesk.com/hc/en-us/articles/42139500580119-Vulnerability-CVE-2026-58046-Blind-SQL-injection-in-Plesk-s-XML-RPC-API · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-58046 · Nota de Segurança