HIGH
CVE-2026-64636
CVSS
7.7
Description
An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.
Weakness (CWE)
CWE-89
SQL Injection
EPSS Score
0.25%
Probability of exploitation in next 30 days
17th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.