CVE ID :CVE-2026-56843 Published : July 8, 2026, 1:16 a.m. | 1 hour, 58 minutes ago Description :Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-56843 - WebPros Plesk XML-RPC API Incorrect Authorization Vulnerability

VERWANDTEARTIKEL

Exploit für kritische libssh2-Schwachstelle wird missbraucht

CVE-2026-56290

CVE-2026-55427 - Coder vulnerable to SSH config injection via unsanitized server-supplied values in `coder config-ssh`

CVE-2026-55428 - Coder: Route hijacking through lack of validation of agent-supplied AllowedIPs in tailnet coordinator

CVE-2026-55429 - Coder's workspace app upsert allows cross-workspace agent rebinding via user-controlled app ID

CVE-2026-59706 - mem0 - Server-Side Request Forgery and Plaintext API Key Exposure via Unauthenticated Config Endpoints