CVE-2026-68487

Description

Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

Traduire en français

Produits concernés

• WebPros Plesk

Scores CVSS

Faiblesses (CWE)

• CWE-36

Références

• https://support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversal

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories