Critical Alert 1 Active Exploit Detected Today

CVE-2026-20316 — Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability →
Powered by CVE Watchtower
×
July 30, 2026

CVE Watchtower


← Back to CVE List

CVE-2026-58046NVD

Vulnerability Summary

Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel.
Severity Level
CRITICAL(9.9)
Published Date
Jul 30, 2026
Last Modified
Jul 30, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-89: SQL Injection ↗
Improper neutralization of special elements used in an SQL command, allowing attackers to modify queries.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References