Technical Questions

Security

• Trusted IP address is banned in Fail2Ban
• Vulnerability CVE-2026-68492: Arbitrary code execution as root in Plesk via the Plesk RESTful API extension
• Vulnerability CVE-2026-87898: Arbitrary code execution as root in Plesk's Site Import extension
• Vulnerability CVE-2026-68489: Arbitrary code execution as root in Plesk's Node.js Toolkit and Ruby extensions
• Vulnerability in Plesk's Backup Manager: symlink race during restore allows root privilege escalation
• Vulnerability in Plesk's Backup Manager: unsigned backup header allows path traversal
• See all 7 articles

Plesk Service/Interface

• Vulnerability CVE-2026-67397: Arbitrary code execution as root in Plesk
• How to enable detailed error reporting for Plesk interface on Windows Server
• CVE-2026-67394: Vulnerability in Plesk allows privilege escalation to root
• Domain count per PHP handler in Plesk does not match the number of items in the filtered list
• How to change the recipients of Plesk Security Advisory, Product News, and Security Updates emails for a Plesk Partner account
• CVE-2026-64637 Authentication Bypass Leading to Privilege Escalation in Plesk
• See all 713 articles

Other

• How to secure a Plesk server
•  What to do if Plesk server was hacked?
• Vulnerability CVE-2026-64639: Privilege Escalation via Database Cloning in Plesk
• Vulnerability CVE-2026-9256
• Why does an SSL certificate expire before the subscription period ends?
• Vulnerability CVE-2026-43284: Dirty Frag
• See all 489 articles

Webserver

• Websites on PHP-FPM are unavailable or loading slowly: server reached max_children setting (*), consider raising it
• How to calculate pm.max_children value on a Plesk server?
• HTTP/3 connections to websites on a Plesk server fail intermittently: sendmsg() failed (90: Message too long) while sending frames
• Vulnerability CVE-2026-49975: HTTP/2 Bomb
• Vulnerability: CVE-2026-42945: DoS and RCE in nginx before 1.31.1/1.30.1
• Is Plesk affected by CVE-2026-23918? (Double Free and possible RCE in Apache http2 module)
• See all 531 articles

Applications & Extensions

• What DDoS protection tools are available in Plesk
• How to whitelist an IP address in Plesk Fail2Ban
• How to install Let's Encrypt SSL certificate for a domain in Plesk?
• Unable to set up Multi-Factor Authentication (MFA) under customer or reseller account in Plesk: QR code is not displayed
• How to connect cPanel/Plesk to MCP in WebPros Dashboard?
• Vulnerability: Privilege Escalation via Phusion Passenger's Watchdog API
• See all 707 articles

Backup, Restore & Migration

• What are known limitations of Plesk Migrator extension?
• Plesk Migrator errors during post-migration check: Failed to adjust common migrated applications for new environment
• Plesk migration in Windows fails: certificate verify failed: EE certificate key too weak
• Vulnerability CVE-2026-65647 in Plesk's Site Import and Migrator extensions
• Plesk Migrator fails: APS database assignment error: Not a gzipped file (b'PK')
• How to restore a remote full server backup in a new Plesk server?
• See all 389 articles

Databases

• How to upgrade MariaDB on Plesk for Linux
• After updating to Plesk Obsidian 18.0.81, upgrading a MariaDB server fails: Variable "$releaseId" of required type "String!" was not provided.
• Error adding a domain in Plesk: DB query failed: Unknown column 'disabled_with_parent' in 'field list'
• Vulnerability CVE-2026-65642 in Plesk's database management interface
• Vulnerability in Plesk’s MS SQL database user password update mechanism
• MSSQL 'sa' user locked out: Login failed for user 'sa'
• See all 262 articles

Installation & Upgrade

• How to perform dist-upgrade procedure on Linux server with Plesk?
• How to update Plesk Obsidian to the latest build
• How to make an in-place upgrade of a Plesk server from CloudLinux 8 to CloudLinux 9?
• The dnf update fails on the Plesk server with AlmaLinux 9 OS: cannot install both libavif-1.1.1-3.el9.x86_64 from epel and libavif-0.11.1-5.el9.x86_64 from @System
• How to make an in-place upgrade of a Plesk server from CloudLinux 7 to CloudLinux 8?
• How to make an in-place upgrade of a Plesk server from AlmaLinux 8 to AlmaLinux 9?
• See all 273 articles

Mail

• Some emails fail to open in Plesk Premium Email (Kolab) webmail with a 500 error or a blank page
• Outgoing mail messages are not being DKIM signed in Plesk 18.0.80 with Qmail
• Unable to connect SmarterMail to Plesk after updating SmarterMail to 100.0.9735: component shows as Not configured
• Unable to send email to Yahoo mailboxes from a Linux Plesk server: said: 550 5.7.25 Forward-confirmed reverse DNS failed tnmpmscs
• Delivery Status Notifications (DSN) sent between local mailboxes are marked as spam by DMARC
• SpamAssassin rules can't be updated on CentOS 7 server with Plesk: config: SpamAssassin failed to parse line, is not valid for "util_rb_3tld"
• See all 560 articles

DNS & Statistics

• Error when generating FTP statistics on a Linux Plesk server where the locale is set to something other than English
• Vulnerability CVE-2026-65646 in Plesk's DNS zone management functionality
• How to remove AWStats component from Plesk?
• How to change statistics tool from AWStats to GoAccess for domains in Plesk?
• Why was AWStats deprecated, what tool replaces it, and what happens to existing servers and domains that still use AWStats?
• AWStats traffic significantly differs from Plesk traffic stats in a domain
• See all 142 articles

Website Builder

• Plesk Sitejet domain fail to publish with permissions error for .well-known directory: filemng: Error occurred during /bin/rm command.
• Sitejet Builder can not be opened for a Plesk domain: Error: Could not connect to Website Builder API
• Error opening Site Builder: pm_Exception: You don't have permission to perform this action
• Plesk Sitejet Builder editing error: Can not access Sitejet Website Builder for this domain after migration.
• Unable to publish website created in Web Presence Builder: APIv1 is deprecated. Please, switch to the new APIv3
• Unable to find Web Presence Builder in Plesk Installer
• See all 24 articles