CVE-2025-54336

Plesk Obsidian version 18.0.70 is vulnerable to an authentication bypass due to a weak comparison (==) in the _isAdminPasswordValid function located in admin/plib/LoginManager.php. If the correct administrator password follows the format "0e" followed by any digit string, an attacker can gain una...