• The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • Debian 11 has reached its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.81 is the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Issue critical PHP security updates (CVE-2026-109618 / CVE-2026-109619)

When will updates 18.0.80#11 and 18.0.81#4 finally be released? It can't be right that the most important update is still pending! Other panels have had this sorted out for a long time now; with just the PHP updates, only the customers' websites are secure—the main interface isn't yet!
 
Why can DirectAdmin update/patch everything within 3 hours, where Plesk takes many more hours?
Heck, DirectAdmin even patched PHP versions from 5.4 to 8.5! Without the use of expensive third-party TuxCare solutions. Great service from DA to be honest.
 
You must log in or register to reply here.

Similar threads

brother4
Question ETA for critical PHP security updates (CVE-2026-109618 / CVE-2026-109619)?
5 6 7
Replies
126
Views
43K
Lucas K.
L
D
Resolved CVE-2026-9256 NGINX ngx_http_rewrite_module vulnerability
Replies
3
Views
4K
Daveo
Daveo
I
Question CVE-2026-23918, CVE-2026-24072 and update to Apache 2.4.67
Replies
10
Views
14K
iainh
I
R
Issue Three more CVEs for nginx just hit - one rated as critical with DoS and RCE possible
Replies
3
Views
3K
rhall
R
D
Question When will Plesk update Roundcube to 1.6.16 / 1.7.1? (Multiple CVEs)
Replies
2
Views
5K
Sebahat.hadzhi
Sebahat.hadzhi
Back
Top