CVE-2026-64636

An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data from the panel database.

We have discovered 100,094 live websites that are affected by CVE-2026-64636.

Run a Free Instant Scan



Affected Software

Product  Plesk
Category Hosting Panels
Vulnerable Domains100,094 live websites (98% of Plesk install base)
Vulnerable Versions
  • from 18.0.51 through 18.0.80.1
Vulnerable Versions Count30 versions ( 49% of all versions)



Details

  • Published - Aug 7, 2026
  • Updated - Aug 7, 2026

Website Distribution by Country

Number of websites using CVE-2026-64636
United States15,498 websites


Germany27,418 websites
Netherlands10,642 websites
Spain6,104 websites
Turkey5,491 websites
GB5,160 websites
France4,973 websites
Italy4,798 websites
India1,566 websites
Lithuania1,226 websites

Website Distribution by TLD

Number of websites using CVE-2026-64636
.com33,254 websites
.de15,751 websites
.nl8,731 websites
.it4,064 websites
.net3,414 websites
.org3,199 websites
.co.uk2,851 websites
.es2,568 websites
.fr1,589 websites
.eu1,345 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2026-64636

Top websites that are affected by CVE-2026-64636. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
****.***.cn United States*,***
*******.com Germany**,***
********.**.uk GB**,***
******.******.com United States**,***
****.********.ru Germany**,***
***********.******.de Germany**,***
********.com United States**,***
**.*******.com Germany**,***
****.***.cn United States**,***
**************.de United States**,***
See full domain list

FAQ

A total of 100,094 websites have been identified as vulnerable to CVE-2026-64636, based on global website indexing conducted by WebTechSurvey.
The Plesk is affected by the CVE-2026-64636 vulnerability.
Plesk versions up to 18.0.80.1 are vulnerable to CVE-2026-64636.
CVE-2026-64636 is resolved in version 18.0.80.1 of Plesk.