A newly disclosed vulnerability in Plesk for Linux, the widely used hosting control panel, lets a customer or reseller with shell access escalate their privileges all the way to root through an OS command injection flaw. It affects every version from 18.0.34 up to just before the 18.0.79.9 and 18.0.80.5 fixes. Since Plesk manages countless shared hosting servers, an exploit here could hand a low-privilege tenant full control of the underlying machine.
// source: nvd.nist.gov ↗