CVE-2026-64639

A critical vulnerability in Plesk versions prior to 18.0.79.6 and 18.0.80.2 allows low-privileged users, such as customers or resellers, to exploit an incorrect database cloning process, enabling them to execute arbitrary code with the privileges of the database server administrator. This poses a significant risk of unauthorized access and potential data compromise. Organizations using affected versions should prioritize immediate patching to mitigate this severe security threat.