AI description
Automated description summarized from trusted sources.
CVE-2026-65646 describes a vulnerability found in Plesk, specifically within its DNS zone management feature. This flaw stems from the improper neutralization of special elements. The vulnerability allows remote authenticated users to disclose arbitrary local files on the system. Additionally, it enables these users to escalate their privileges within the Plesk environment.
- Description
- Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose arbitrary local files and escalate privileges.
- Source
- support@hackerone.com
- NVD status
- Awaiting Analysis
CVSS 3.0
- Type
- Secondary
- Base score
- 9.9
- Impact score
- 6
- Exploitability score
- 3.1
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- support@hackerone.com
- CWE-74
- Hype score
- Not currently trending