CVE Catalog
CVE-2026-64639
CriticalCVSS 9.3Summary
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.
Risk Assessment
A user with limited privileges can gain full control over the database server, potentially leading to data integrity and confidentiality breaches.
Recommendation
Update Plesk to version 18.0.79.6 or 18.0.80.2, which include the fix.
Original NVD description (English source)
Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.