CVE-2026-44962

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 1, 2026

Last Seen

June 1, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Plesk Vulnerability Allows Arbitrary Command Execution70.5

A critical vulnerability in Plesk, tracked as CVE-2026-44962, was disclosed on May 29, 2026. This flaw enables authenticated low-privileged users to execute arbitrary operating system commands on affected servers. The vulnerability is linked to improper input handling in the APS Application Catalog...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Plesk Vulnerability Allows Arbitrary Command Execution

Jun 1·2 sources

Related Entities

Zero-day Exploit CWE-20 - Improper Input Validation CWE-78 - OS Command Injection T1059 - Command and Scripting Interpreter Linux Plesk

CVE-2026-44962

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical Plesk Vulnerability Allows Arbitrary Command Execution

Related Articles (2)

Critical Plesk Vulnerability Lets Users Execute Server Commands

Critical Plesk Vulnerability Let Users Execute Arbitrary Commands on the Server

Related Entities