CVE-2026-65647CWE-59

CVE-2026-65647

published August 27, 2026

CVSS
8.7
EPSS
1%
Percentile
54.2
In the wild
Unconfirmed
What it is

Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root.

The record
Technical detail
CVSS
8.7 · NONE
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00743 · 54.2th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2026-08-27T02:16Z
References (1)
https://support.plesk.com/hc/en-us/articles/42871001389207-Vulnerability-CVE-2026-65647-in-Plesk-s-Site-Import-and-Migrator-extensions · [email protected]
EPSS history
Timeline
  • 28 AUG 06:50Z
    EPSS moved — → 0%
    epss
  • 26 AUG 21:21Z
    Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root
    cvelistv5