• The APS Catalog has been deprecated and removed from all Plesk Obsidian versions.
    Applications already installed from the APS Catalog will continue working. However, Plesk will no longer provide support for APS applications.
  • Please be aware: with the Plesk Obsidian 18.0.78 release, the support for the ngx_pagespeed.so module will be deprecated and removed from the sw-nginx package.

New php.net vulnerability on Plesk Panel 11.5

Thank you. I have notified responsible person. I will keep this thread updated with results.
 
Developers are working on it in scope of corresponding request PFSI-40.
 
You must log in or register to reply here.

Similar threads

M
Issue [CVE-2025-40778] BIND 9 Resolver Enables Cache Poisoning Via Unsolicited Answers
Replies
2
Views
3K
Kaspar
K
Hangover2
Critical security issue fixed on 24–25 February 2026 (Plesk Obsidian 18.0.75 Update 1 / 18.0.76 Update 2) — request for vulnerability details
Replies
4
Views
2K
Hangover2
Hangover2
T
Question How to Detect and Mitigate Next.js / React Vulnerabilities on Windows Plesk Server
Replies
0
Views
2K
teletek
T
P
Resolved Cannot verify Drupal drush install or invoke drush commands
Replies
2
Views
2K
PeterK900
P
M
Resolved Roundcube vulnerability CVE-2025-49113
2
Replies
29
Views
12K
Sebahat.hadzhi
Sebahat.hadzhi
Back
Top