CVE-2026-64636EPSS p12.0%

CVE-2026-64636CVE-2026-64636

Description

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

Scoring

CVSS 7.7 ()
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS0.21% probability of exploitation · percentile 12.0% · 2026-08-08T12:02:54Z
Last modified2026-08-07
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.