CVE-2026-48614

An improper authorization vulnerability in the Plesk XML API permits authenticated users to inject arbitrary configuration directives, leading to arbitrary file writes with root privileges and full privilege escalation on the server. This critical flaw poses a significant risk to any system utilizing Plesk, particularly those managing sensitive data or critical infrastructure. Organizations using Plesk should prioritize immediate remediation to mitigate potential exploitation.