• The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Question CRS versions 4.28.0, 4.25.1 LTS, and 3.3.10 released

F

Franchino

New Pleskian
Server operating system version
Almalinux 9.8
Plesk version and microupdate number
18.0.79
Hi,

The OWASP CRS team is pleased to announce three coordinated releases today: v4.28.0 (main branch), v4.25.1 (v4 LTS), and v3.3.10 (v3 LTS). All three fix the same two high-severity security vulnerabilities that affect all previous CRS releases. Users on any supported branch are strongly encouraged to update.


CRS versions 4.28.0, 4.25.1 LTS, and 3.3.10 released

Modsecurity 2.9.14 (Security Fix)
Modsecurity 3.0.16 (Security Fix)

modsecurity.org

About CVE-2026-52747 and 2026-52761

We would like to share our take on CVE-2026-52747 and CVE-2026-52761, which were published on June 29, 2026.
modsecurity.org modsecurity.org

​

 
Hi, @Franchino . Apologies for the delayed update. Thank you for sharing this information. We are aware of the upstream OWASP CRS and ModSecurity security releases and our team is already working on updating the component to the latest version.
 
You must log in or register to reply here.

Similar threads

F
Question Security FIX CVE-2026-33691 OWASP < 4.25.0 (LTS)
Replies
2
Views
3K
Franchino
F
P
Question ModSecurity on Plesk 18.0.81.2: isolated rule download, offline rollback and security updates
Replies
3
Views
2K
pepinacle14
P
D
Question When will Plesk update Roundcube to 1.6.16 / 1.7.1? (Multiple CVEs)
Replies
2
Views
5K
Sebahat.hadzhi
Sebahat.hadzhi
R
Issue Three more CVEs for nginx just hit - one rated as critical with DoS and RCE possible
Replies
3
Views
3K
rhall
R
R
Resolved CVE-2026-42945 Nginx Rift and older Wordpress Toolkit heads up
Replies
14
Views
13K
rhall
R
Back
Top