SQL Injection Vulnerability in Plesk XML-RPC API

CVE-2026-58046

What is CVE-2026-58046?

A security vulnerability exists in the Plesk XML-RPC API due to insufficient neutralization of user Input. This flaw enables a remote low-privileged authenticated user to execute SQL injection attacks, which can lead to unauthorized access to sensitive information within the Plesk database. Consequently, the attacker may gain comprehensive control over the Plesk panel, posing a significant risk to the overall security of the application.

References