{"schema":"threatline.record/2","record":{"id":"CVE-2026-68492","aliases":[],"summary":"An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the \"Plesk RESTful AP","details":"An untrusted search path vulnerability in Plesk from 18.0.34 before 18.0.80.8 and 18.0.81 before 18.0.81.1 allows remote authenticated users to execute arbitrary code as root via the \"Plesk RESTful API\" extension from 2.4.2 before 2.4.7.","categories":["Unclassified"],"product":"Plesk","vendor":"WebPros","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-68492","source_modified_at":"2026-09-24T14:28:36.450Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Plesk","vendor":"WebPros","versions":[{"version":"18.0.34","status":"affected","lessThan":"18.0.80.8","versionType":"semver"},{"version":"18.0.81","status":"affected","lessThan":"18.0.81.1","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-68492","source_modified_at":"2026-09-24T14:28:36.450Z","fetched_at":"2026-10-23T18:52:38.922436Z","product":"Plesk extension \"Plesk RESTful API\"","vendor":"WebPros","versions":[{"version":"2.4.2","status":"affected","lessThan":"2.4.7","versionType":"semver"}],"defaultStatus":"unaffected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-68492","source_modified_at":"2026-09-24T14:28:36.450Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Plesk","ecosystem":null},"version":"18.0.80.8","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-68492","source_modified_at":"2026-09-24T14:28:36.450Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Plesk","ecosystem":null},"version":"18.0.81.1","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-68492","source_modified_at":"2026-09-24T14:28:36.450Z","fetched_at":"2026-10-23T18:52:38.922436Z","package":{"name":"Plesk extension \"Plesk RESTful API\"","ecosystem":null},"version":"2.4.7","basis":"first unaffected version stated in the CVE record"}],"cvss":8.7,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00384,"percentile":0.31254,"score_date":"2026-10-23"},"published_at":"2026-09-23T19:52:47.192Z","modified_at":"2026-09-24T14:28:36.450Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-68492","fetched_at":"2026-10-23T18:52:38.922436Z","source_modified_at":"2026-09-24T14:28:36.450Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-68492","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://support.plesk.com/hc/en-us/articles/43644058632983"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"none","automatable":"no","technical_impact":"total","assessed_at":"2026-09-24T14:28:28.100954Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-09-24T14:28:36.450Z","content_hash":"df96f24894d15e7ac553f7667673946d934c351a6b9e50afa26f39c55c39a0ef"}}