https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 16:15:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-352455 EUVD-2026-352455 https://cve.radiocsirt.org/vuln/euvd-2026-352455 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44962 <p>Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sanitization. This allows an authenticated, low-privileged user to execute arbitrary operating system commands on the server, resulting in local privilege escalation.</p> <p>Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sanitization. This allows an authenticated, low-privileged user to execute arbitrary operating system commands on the server, resulting in local privilege escalation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44962 https://cve.radiocsirt.org/vuln/ghsa-2785-qq7p-x3cj <p>Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sanitization. This allows an authenticated, low-privileged user to execute arbitrary operating system commands on the server, resulting in local privilege escalation.</p> <p>Plesk contains an XPath injection vulnerability in the APS Application Catalog search functionality, where user-supplied input is interpolated into XPath queries without proper sanitization. This allows an authenticated, low-privileged user to execute arbitrary operating system commands on the server, resulting in local privilege escalation.</p> https://cve.radiocsirt.org/vuln/ghsa-2785-qq7p-x3cj