CVE-2026-68488
A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink following in Plesk causes local privilege escalation to root via arbitrary file/directory ownership takeover.
- Published Sep 10, 2026
- CVSS 9.9 critical
- 0.4% chance of exploitation in the next 30 days (EPSS)