SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-44962

CRITICAL · CVSS 9.9 EPSS 0.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-05-29 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.9. See the original NVD description below for full technical details.

CVE
CVE-2026-44962
Severity
CRITICAL
CVSS
9.9
EPSS
0.69%

Original NVD Description

Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sanitization. This allows an authenticated, low-privileged user to execute arbitrary operating system commands on the server, resulting in local privilege escalation.