Static Code Injection in Plesk extensions “Ruby” before 1.6.6 and “Node.js Toolkit” before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.
2026年9月15日
CVE-2026-68489 – Static Code Injection in Plesk extensions “Ruby” before 1.6.6 and “Node.js Toolkit” before
📑 文章目录



