Improper Symlink Resolution Vulnerability in Plesk by Plesk
CVE-2026-65647

8.7HIGH

Key Information:

Vendor

Webpros

Status
Plesk Migrator
Plesk Site Import
Vendor
CVE Published:
26 August 2026

What is CVE-2026-65647?

An improper symlink resolution vulnerability in Plesk's Site Import and Migrator extensions allows remote authenticated users to manipulate symlinks, potentially leading to arbitrary code execution with root privileges. This raises significant security concerns as an exploited vulnerability could compromise the integrity and confidentiality of sensitive data within affected systems.

Affected Version(s)

Plesk Migrator 0 < 2.36.0

Plesk Site Import 0 < 1.12.1

References

https://support.plesk.com/hc/en-us/articles/4287100138920...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.