UpHeron
All vulnerabilities

Servers and applications

CVE-2026-82977

The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-subscription information disclosure.

Severity
High 8.4
Published
12 Nov 2026
Last changed
12 Nov 2026
Added to UpHeron
12 Nov 2026
Weakness
Incorrect permissions on a critical resource (CWE-732)
Attack
Over the network · Needs a user account · No user action needed
Attacker can
Read data
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:L/SA:L
Sources
CVE Program

Affected software

SoftwareAffected versions
PleskServers and applications · cna:webpros|plesk
  • From 18.0.77 up to 18.0.81.7
  • From 18.0.82 up to 18.0.82.2

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-82977