{"id":"CVE-2026-65646","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-65646","summary":"Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files and escalate privileges.","details":"Improper neutralization of special elements in Plesk allows remote authenticated users to disclose arbitrary local files and escalate privileges.","published":"2026-08-26T22:16:26.020","modified":"2026-08-26T22:16:26.020","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://support.plesk.com/hc/en-us/articles/42877023875351-Vulnerability-CVE-2026-65646-in-Plesk-s-DNS-zone-management-functionality"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-26T22:16:26.020"}}