CVE-2026-64639CWE-266

CVE-2026-64639

published August 12, 2026

CVSS
9.3
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.

The record
Technical detail
CVSS
9.3 · NONE
CVSS v4.0
Not supplied
EPSS
0.00552 · 45.4th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-08-12T20:17Z
References (1)
https://support.plesk.com/hc/en-us/articles/42521305418903-Vulnerability-CVE-2026-64639-Privilege-Escalation-via-Database-Cloning-in-Plesk · [email protected]
EPSS history
Timeline
  • 12 AUG 15:31Z
    Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary…
    cvelistv5