CVE-2026-65647

Description

Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root.

References

• https://support.plesk.com/hc/en-us/articles/42871001389207-Vulnerability-CVE-2026-65647-in-Plesk-s-Site-Import-and-Migrator-extensions