WebPros security advisory (AV26-866)
Brief
Serial number: AV26-866 Date: September 1, 2026
As of September 1, 2026, WebPros is affected by vulnerabilities in the following product:
- Plesk
- Prior to 18.0.79.9
- Prior to 18.0.80.5
The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.
- CVE-2026-67394: Vulnerability in Plesk allows privilege escalation to root
WebPros security advisory (AV26-866) - Canadian Centre for Cyber Security