CVE-2026-64637

An improper privilege management vulnerability in the XML-RPC API of Plesk versions prior to 18.0.80 allows authenticated resellers to escalate their privileges and gain administrative access to the root user account. This critical flaw poses a significant risk, as it could lead to unauthorized control over the server and its resources. Organizations using affected versions of Plesk should prioritize immediate updates to mitigate potential exploitation.