{"vulnerability": "cve-2026-65642", "sightings": [{"uuid": "559fae61-8c2a-479d-aa76-c47c206a2f38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-854", "content": "", "creation_timestamp": "2026-08-27T16:16:00.859165Z"}, {"uuid": "3032cf99-82ea-4fd5-8906-a1c183ca5da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://t.me/captainsmok3r_official/502", "content": "several security vulnerabilities have been announced for Plesk Panel in recent days. A few of them have CVSS scores at the 8.x and 9.x levels.\n\u2022 CVE-2026-65642 \u2014 Unauthorized access to databases\n\u2022 CVE-2026-65646 \u2014 Arbitrary file read via DNS management and exposure of administrator credentials\n\u2022 CVE-2026-65647 \u2014 Privilege escalation from Plesk user to root\n\u2022 CVE-2026-67394 \u2014 Privilege escalation from customer/reseller account to root", "creation_timestamp": "2026-08-29T00:00:06.977686Z"}, {"uuid": "6e366357-79e5-4406-a6db-017de04ccb86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65642", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3kc5caaqeujxk", "content": "CVE-2026-65642 - Plesk Insecure Direct Object Reference Vulnerability\nCVE ID : CVE-2026-65642\n \n Published : Aug. 26, 2026, 10:16 p.m. | 19\u00a0minutes ago\n \n Description : Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote ...", "creation_timestamp": "2026-08-27T00:05:11.377100Z"}]}