Description
Untrusted search path vulnerability in /usr/local/psa/admin/sbin/wrapper in Parallels Plesk Panel 11.0.9 allows local users to gain privileges via a crafted PATH environment variable.
Remediation
References
Related Vulnerabilities
WordPress Plugin Preview E-mails for WooCommerce Cross-Site Scripting (1.6.8)
MongoDb Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-1847)
WordPress Plugin Enable Media Replace Arbitrary File Upload (4.0.1)
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2024-48899)