CVE-2026-67397Patch

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://support.plesk.com/hc/en-us/articles/43070000520855-Vulnerability-CVE-2026-67397-Arbitrary-code-execution-as-root-in-Plesk

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 3 signals
Technical details provided in 3 signals
Peaked 1d ago at 2 mentions (2026-09-03); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Patch

3100.0%

Classification over time

Date	Total	Labels

2026-09-03	2	Patch2
2026-09-09	1	Patch1

Full discourse3 posts

Rıdvan Yağlı@ridvanyagli46d
Patch
🔴 Plesk'te kritik güvenlik açığı: CVE-2026-67397 ! Plesk Panel for Linux'ta keşfedilen güvenlik açığı, düşük yetkili bir Plesk kullanıcısının root yetkisiyle keyfi kod çalıştırmasına ve sunucunun tamamen ele geçirilmesine yol açabiliyor. Etkilenen versiyonlar: • Plesk 18.0.79.9 ve öncesi • Plesk 18.0.80 – 18.0.80.5 Yamalanan versiyonlar: • 18.0.79.10 • 18.0.80.6 ve üzeri Plesk Windows sürümleri bu açıktan etkilenmiyor. ⚠️ Linux üzerinde Plesk kullanan sunucuların acilen güncellenmesi öneriliyor!
Post summary
CVE-2026-67397 is a privilege‑escalation flaw in Plesk Panel for Linux that lets a low‑privileged user execute arbitrary code with root rights. The vulnerability is patched in versions 18.0.79.10 and 18.0.80.6+, and admins are urged to update immediately.
05032162.2K
2.4K followersView on X
by.X@byXcore39d
Patch
🔴 CVE-2026-67397 Plesk - Root olarak arbitrary code execution - Etkilenen sürüm: Plesk Linux 18.0.80.5 Yama: 18.0.79.10 / 18.0.80.6 🔥 #cpanel #hosting #SQL #cvealert #plesk #domain
Post summary
CVE-2026-67397 permits root‑level arbitrary code execution on Plesk Linux 18.0.80.5; patches 18.0.79.10 and 18.0.80.6 are available, with no PoC or active exploitation reported.
0000072
42 followersView on X
cplicensenet@cplicensenet45d
Patch
🔐 New Plesk Security Update CVE-2026-67397 could allow a Plesk user to execute code as root. Running Plesk for Linux? Check again—even if you recently patched. ✓ Update to 18.0.79.10 / 18.0.80.6 or later #SecureTheStack #Plesk https://t.co/oFpjA80GNV
Post summary
The post announces a security update for Plesk to mitigate CVE‑2026‑67397, which allows root code execution.
0000059
17 followersView on X

Explore more

Back to dashboard