Information Disclosure Vulnerability in Plesk Obsidian for Linux by Plesk
CVE-2026-82977

8.4HIGH

Key Information:

Vendor

Webpros

Status
Plesk
Vendor
CVE Published:
12 November 2026

What is CVE-2026-82977?

The Plesk GoAccess statistics integration in Plesk Obsidian for Linux allows unauthorized access to cross-subscription information. This vulnerability affects specific versions of Plesk, creating potential exposure of sensitive data across different subscriptions. Prompt attention to updates is crucial for securing systems against unauthorized information disclosure.

Affected Version(s)

Plesk 18.0.77 <= 18.0.81.7

Plesk 18.0.82 <= 18.0.82.2

References

https://support.plesk.com/hc/en-us/articles/4491591249653...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ady Elouej
.