CVE-2026-68487

Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

hackerone·CWE-36·Published 2026-09-10

CVSS

—

EPSS

0.01

KEV

Exploits

cve.orgen

106 chars

Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

NVDen

106 chars

Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	9.9	—	—	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
3.0	Primary	cve.org	9.9	—	—	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H