CVE-2026-68492

An untrusted search path vulnerability in Plesk allows remote authenticated users to execute arbitrary code with root privileges through the Plesk RESTful API extension. This poses a significant risk, as it can lead to unauthorized access and control over affected systems. Organizations using Plesk versions prior to 18.0.80.8 and 18.0.81.1 should prioritize patching to mitigate this high-severity threat.