VulnSocial

CVE-2026-58046Patch

LOWCVSS 9.9 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 6 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 2d ago at 3 mentions (2026-07-31); latest day: 1
  • 6 total mentions across 4 days

Deep dive

Activity timeline6 mentions / 4d
01223Mentions · 2026-07-28: 1Mentions · 2026-07-31: 3Mentions · 2026-08-01: 1Mentions · 2026-09-04: 1PoC Mentioned / Linked · 2026-07-31: 1Patch / Workaround · 2026-07-28: 1Patch / Workaround · 2026-07-31: 1Patch / Workaround · 2026-08-01: 1Technical Details · 2026-07-31: 1Technical Details · 2026-08-01: 1Technical Details · 2026-09-04: 107-2807-3108-0109-04
Signal classification3 categories
Patch
350.0%
Disclosure
233.3%
General
116.7%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-07-281
Patch1
2026-07-313
Disclosure1General1Patch1
2026-08-011
Patch1
2026-09-041
Disclosure1
Full discourse6 posts
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2026-58046 - Critical SQLi in Plesk XML-RPC API. Authenticated low-priv user can read entire DB, leading to full panel compromise. CVSS 9.9. No patch available yet. Apply workarounds immediately. #CVE #Plesk #infosec #developer #developers #python #git #github #gitlab #hosting #sqli #sql #mysql #cybersecurity #100daysofcybersecurity #redteam #blueteam #100daysofcodechallange #100daysofcode #linux https://www.valtersit.com/cve/CVE-2026-58046

    Post summary

    CVE-2026-58046 is a critical SQL injection in Plesk’s XML‑RPC API that lets authenticated low‑privilege users read the entire database, leading to full panel compromise; no patch yet, so immediate workarounds are advised.

    00021334
    1.1K followersView on X
  • Sami Laiho@samilaiho
    Patch

    Plesk: Blind SQL injection in Plesk's XML-RPC API URL: https://support.plesk.com/hc/en-us/articles/42139500580119-Vulnerability-CVE-2026-58046-Blind-SQL-injection-in-Plesk-s-XML-RPC-API Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.9

    Post summary

    The article announces a critical blind SQL injection vulnerability in Plesk’s XML‑RPC API (CVE‑2026‑58046) and notes that an official fix has been released.

    11000823
    30.6K followersView on X
  • ExploitGrid@exploitgrid
    Disclosure

    [CVE] CVE-2026-58046 [HIGH PRIORITY] 🔗 https://exploitgrid.net/cve/CVE-2026-58046

    Post summary

    A high-priority vulnerability, CVE-2026-58046, is announced with a link to an external resource that may contain further details.

    1000039
    29 followersView on X
  • ExploitGrid@exploitgrid
    General

    🛡️ #ExploitGrid Daily Threat Digest Top #Vulnerabilities (#CVEs) of the day CVE-2026-48449 CVE-2026-66803 CVE-2026-12946 CVE-2026-13435 CVE-2026-58046 ..🧵👇

    Post summary

    The post lists several CVE identifiers without providing any technical details or actionable information.

    1000056
    29 followersView on X
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-58046: Plesk XML-RPC API SQL Injection - What It Means for Your Business and How to Respond https://hubs.li/Q04wNkgm0

    Post summary

    The snippet refers to a newly disclosed Plesk XML‑RPC API SQL Injection vulnerability, highlighting its business impact and prompting readers to learn how to respond, though specific mitigations or exploits are not detailed.

    0000048
    36 followersView on X
  • NTTsrl@NtTsrl
    Patch

    a seguito comunicazione di vulnerabilità CVE-2026-58046 segnalata da Plesk, abbiamo già provveduto a mettere in sicurezza i nostri server. https://nttsrl.net/aggiornamento-sicurezza-plesk/

    Post summary

    A notification of CVE-2026-58046 was received and the organization has applied security measures to protect their servers, as referenced by the linked update page.

    0000043
    3 followersView on X

Explore more

Back to dashboard