CVE-2026-65642

An insecure direct object reference vulnerability in Plesk versions 18.0.79.7 and earlier, as well as 18.0.80 through 18.0.80.3, permits remote authenticated users to access and alter databases belonging to other customers. This could lead to unauthorized data exposure and manipulation, posing a significant risk to data integrity and confidentiality. Organizations using affected versions of Plesk should prioritize immediate remediation to mitigate potential data breaches.