EUVD-2026-124553

The Plesk GoAccess statistics integration in Plesk Obsidian for Linux, versions 18.0.77 to 18.0.81.7, 18.0.82 to 18.0.82.2, allows cross-subscription information disclosure...

CVE-2026-82977

The Plesk GoAccess statistics integration in Plesk Obsidian for Linux is vulnerable to cross-subscription information disclosure in versions 18.0.77 to 18.0.81.7 and 18.0.82 to 18.0.82.2 . The root cause involves incorrect permission assignment for critical resources (CWE-732). This flaw allows f...

EUVD-2026-68283

Exposure of Data Element to Wrong Session vulnerability in ash-project ashgraphql can deliver one subscription's resolved records to a different subscriber's topic. AshGraphql.Subscription.Batcher.dosend/5 reads the resolved batch from the process dictionary via Process.get:batchresolved and then...