EUVD-2026-70851
GHSA-pm4q-j54p-8jgq
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local access with low privileges required; scope changes because execution escalates to root, justifying S:C and full CIA impact.
Primary rating from Vendor (hackerone).
CVSS VectorVendor: hackerone
Lifecycle Timeline
3DescriptionCVE.org
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.
AnalysisAI
Path traversal in Plesk web hosting control panel (versions ≤18.0.79.9 and 18.0.80-18.0.80.5) enables local users with low privileges to execute arbitrary code as the root user, resulting in full system compromise. The CVSS 4.0 score of 8.5 reflects high CIA impact with no special attack requirements beyond local OS access (AV:L/PR:L). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have local OS-level access to the target Plesk server with at least low privileges - for example, an SSH shell account, a system account granted by the hosting provider, or equivalent local execution capability (CVSS PR:L, AV:L). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H) captures the core risk profile: local access with low-level privileges is sufficient, there are no special attack conditions, and successful exploitation grants full confidentiality, integrity, and availability impact on the vulnerable system. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Plesk to a version beyond 18.0.80.5 on the 18.0.80 branch, or beyond 18.0.79.9 on the 18.0.79 branch, as directed by the vendor advisory at https://support.plesk.com/hc/en-us/articles/43070000520855-Vulnerability-CVE-2026-67397-Arbitrary-code-execution-as-root-in-Plesk. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running affected Plesk versions (18.0.79.9 and below, or 18.0.80-18.0.80.5) and document the number of hosted customers and data sensitivity of each server. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today