Plesk Obsidian vulnerabilities
1 published CVE names Plesk Obsidian among the affected products.
- 1Published CVEs1 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-49618
In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.
Plesk · Obsidian
Medium5.8