plesk_extension_ruby vulnerabilities

CVEs whose affected-version data names the plesk_extension_ruby package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-68489High· 8.7

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.

Static Code Injection in Plesk extensions "Ruby" before 1.6.6 and "Node.js Toolkit" before 2.5.0 allows remote authenticated users to execute arbitrary code as root via custom environment variables.

▾ TwilightWebPros · Plesk extension "Ruby"EPSS 0.40%via NVD

plesk_extension_ruby vulnerabilities (CVEs) · VulnSea