OCTOBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-87898

CRITICAL · CVSS 9.4 EPSS 1.01%

Source: NVD + CISA KEV + EPSS · Published 2026-09-23 · Last synced 2026-10-07

CyberRota Analysis

AI-Generated

A critical OS command injection vulnerability in Plesk enables remote authenticated users to execute arbitrary code with root privileges, potentially compromising the entire system. Organizations utilizing Plesk should prioritize patching this vulnerability to mitigate the risk of unauthorized access and system exploitation. Immediate action is essential for any environment where Plesk is deployed to protect sensitive data and maintain system integrity.

CVE
CVE-2026-87898
Severity
CRITICAL
CVSS
9.4
EPSS
1.01%

Original NVD Description

OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.