CVE-2026-82977
The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-sub
CVSS
—
Sin CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Publicado: 12 nov 2026 · Última mod.: 12 nov 2026 · CWE-732
Sin historial EPSS suficiente todavía.
The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-subscription information disclosure.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1230397.8 ALT—
———The Gaia OS DynamicCLI daemon runs as root and listens on a world-writable local socket (/tmp/dynamic_socket) without authenticating connecting processes. An authenticated local user can send a command to the socket and have it executed as root.5hCVE-2026-859297.8 ALT20.3%
——6Incorrect permission assignment for critical resource in Windows Brokering File System allows an authorized attacker to elevate privileges locally.2dCVE-2026-1187428.6 ALT53.2%
——16Incorrect permission assignment for critical resource in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.2dCVE-2026-1182887.0 ALT20.0%
——6Incorrect permission assignment for critical resource in Azure File Sync allows an authorized attacker to elevate privileges locally.2dCVE-2026-1057347.0 ALT13.9%
——4Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.2dCVE-2026-145433.9 BAJ2.8%
——1The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access to protected system resources. This flaw can only be exploited after authenticating with an admin-privileged service account.2h