Is CVE-2026-64636 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-64636?

CVE-2026-64636 has a CVSS v3 severity of HIGH (7.7).

Back

CVE-2026-64636

Description

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.