CVE-2026-82977
The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-sub
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Nov 12, 2026 · Last modified: Nov 12, 2026 · CWE-732
Not enough EPSS history yet.
The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-subscription information disclosure.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1230397.8 HIG—
———The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.5hCVE-2026-859297.8 HIG20.3%
——6Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.2dCVE-2026-1187428.6 HIG53.2%
——16Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.2dCVE-2026-1182887.0 HIG20.0%
——6Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.2dCVE-2026-1057347.0 HIG13.9%
——4Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.2dCVE-2026-145433.9 LOW2.8%
——1The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.2h