Plesk — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
December 15, 2025
Last Seen
June 1, 2026

Plesk is a technology platform tracked across 2 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed December 15, 2025; most recent activity June 1, 2026.

Related Threat Clusters

  • Critical Plesk Vulnerability Allows Arbitrary Command Execution

    A critical vulnerability in Plesk, tracked as CVE-2026-44962, was disclosed on May 29, 2026. This flaw enables authenticated low-privileged users to execute arbitrary operating system commands on affected servers. The…

    2 articles · Updated June 1, 2026
  • Critical Plesk Vulnerability Enables Root Access for Users

    A critical vulnerability in Plesk for Linux, tracked as CVE-2025-66430, allows users to gain root access on affected servers. This flaw, found in the Password-Protected Directories feature, results from improper…

    3 articles · Updated December 15, 2025

Recent Intelligence Reports

  • Critical Plesk Vulnerability Let Users Execute Arbitrary Commands on the Server — Cybersecuritynews · June 1, 2026
  • Critical Plesk Flaw Allows Users to Gain Root-Level Access — Cyberpress · December 15, 2025
  • Critical Plesk Vulnerability Allows Users to Gain Root — Gbhackers · December 15, 2025

Related Entities

CVE-2026-44962 CWE-78 - OS Command Injection T1059 - Command and Scripting Interpreter

CVSS v3.1 Breakdown