{"vulnerability": "cve-2026-65647", "sightings": [{"uuid": "b7edf66a-9444-4add-a1fb-68930b7874ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-65647", "type": "seen", "source": "https://cyber.gc.ca/en/alerts-advisories/webpros-security-advisory-av26-854", "content": "", "creation_timestamp": "2026-08-27T16:15:58.604370Z"}, {"uuid": "d96f327b-2ad6-4b02-bf7c-fa975a53e68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65647", "type": "seen", "source": "https://t.me/captainsmok3r_official/502", "content": "several security vulnerabilities have been announced for Plesk Panel in recent days. A few of them have CVSS scores at the 8.x and 9.x levels.\n\u2022 CVE-2026-65642 \u2014 Unauthorized access to databases\n\u2022 CVE-2026-65646 \u2014 Arbitrary file read via DNS management and exposure of administrator credentials\n\u2022 CVE-2026-65647 \u2014 Privilege escalation from Plesk user to root\n\u2022 CVE-2026-67394 \u2014 Privilege escalation from customer/reseller account to root", "creation_timestamp": "2026-08-29T00:00:07.061358Z"}, {"uuid": "f1e0a2f6-d8e5-487f-9abe-4c845636bb62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-65647", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/72g2a243o7qer", "content": "CVE-2026-65647 - Plesk Improper Symlink Resolution Arbitrary Code Execution\nCVE ID : CVE-2026-65647\n \n Published : Aug. 26, 2026, 10:16 p.m. | 19\u00a0minutes ago\n \n Description : Improper symlink resolution before file access in Plesk allows remote authenticated users to execute a...", "creation_timestamp": "2026-08-27T00:11:11.165910Z"}]}