Technical Questions

Security

• Vulnerability CVE-2026-109618 and CVE-2026-109619 (PHP2Shell): Remote code execution in PHP shipped with Plesk
• Security: phpMyAdmin 5.2.3 WebAuthn Two-Factor Authentication Bypass
• Vulnerability CVE-2026-111497: Out-of-bounds write in Brotli bundled with PHP on Plesk for Windows
• Vulnerability CVE-2026-113386: IMAP command injection in Roundcube in Plesk
• Trusted IP address is banned in Fail2Ban
• Vulnerability CVE-2026-68492: Arbitrary code execution as root in Plesk via the Plesk RESTful API extension
• See all 12 articles

Plesk Service/Interface

• How to install or remove additional Plesk PHP versions on a Plesk server?
• Which directories should be added to antivirus exclusion on a Plesk for Windows server?
• Vulnerability CVE-2026-67397: Arbitrary code execution as root in Plesk
• How to enable detailed error reporting for Plesk interface on Windows Server
• CVE-2026-67394: Vulnerability in Plesk allows privilege escalation to root
• Domain count per PHP handler in Plesk does not match the number of items in the filtered list
• See all 717 articles

Other

• Vulnerability CVE-2026-64639: Privilege Escalation via Database Cloning in Plesk
• Vulnerability CVE-2026-9256
• Why does an SSL certificate expire before the subscription period ends?
• Vulnerability CVE-2026-43284: Dirty Frag
• Vulnerability CVE-2026-31431: Copy Fail
• Why doesn't the WP-Toolkit Vulnerabilities email show any domain names?
• See all 488 articles

Webserver

• How to change PHP version / handler for a domain or all domains in Plesk
• HTTP/3 connections to websites on a Plesk server fail intermittently: sendmsg() failed (90: Message too long) while sending frames
• Vulnerability CVE-2026-49975: HTTP/2 Bomb
• Vulnerability: CVE-2026-42945: DoS and RCE in nginx before 1.31.1/1.30.1
• Is Plesk affected by CVE-2026-23918? (Double Free and possible RCE in Apache http2 module)
• Preferred domain redirect does not work when Nginx is not installed in Plesk
• See all 530 articles

Applications & Extensions

• TuxCare Extended Lifecycle Support for PHP can't be enabled in Plesk: CLN response (HTTP 400): You can not register a new server! Right now you have 1 server and your license limit is 1.
• Node.js security vulnerabilities announced, but no Plesk update is available
• What is the TuxCare Extended Lifecycle Support for PHP extension in Plesk?
• TuxCare ELS PHP installation fails in Plesk: Package 'alt-phpXY-mysql-meta' has no installation candidate, 401 Unauthorized on alt-php-els repository
• Extension can not be installed on Plesk server
• How to manage Plesk from a mobile device after Plesk Mobile is retired
• See all 715 articles

Backup, Restore & Migration

• How to change the number of simultaneous threads during Plesk migration
• Plesk Migrator errors during post-migration check: Failed to adjust common migrated applications for new environment
• Plesk migration in Windows fails: certificate verify failed: EE certificate key too weak
• Vulnerability CVE-2026-65647 in Plesk's Site Import and Migrator extensions
• Plesk Migrator fails: APS database assignment error: Not a gzipped file (b'PK')
• How to restore a remote full server backup in a new Plesk server?
• See all 392 articles

Databases

• How to upgrade MariaDB on Plesk for Linux
• After updating to Plesk Obsidian 18.0.81, upgrading a MariaDB server fails: Variable "$releaseId" of required type "String!" was not provided.
• Error adding a domain in Plesk: DB query failed: Unknown column 'disabled_with_parent' in 'field list'
• Vulnerability CVE-2026-65642 in Plesk's database management interface
• Vulnerability in Plesk’s MS SQL database user password update mechanism
• MSSQL 'sa' user locked out: Login failed for user 'sa'
• See all 262 articles

Installation & Upgrade

• How to install Plesk updates
• How to update Plesk Obsidian to the latest build
• Plesk update fails on Linux: Public key for plesk-php74-*.rpm is not installed
• How to make an in-place upgrade of a Plesk server from CloudLinux 8 to CloudLinux 9?
• The dnf update fails on the Plesk server with AlmaLinux 9 OS: cannot install both libavif-1.1.1-3.el9.x86_64 from epel and libavif-0.11.1-5.el9.x86_64 from @System
• How to make an in-place upgrade of a Plesk server from CloudLinux 7 to CloudLinux 8?
• See all 276 articles

Mail

• Unable to create mailboxes in Plesk for Windows after updating SmarterMail to 100.0.9770: mailmng failed: Login failure: Token revoked
• Some emails fail to open in Plesk Premium Email (Kolab) webmail with a 500 error or a blank page
• Outgoing mail messages are not being DKIM signed in Plesk 18.0.80 with Qmail
• Unable to connect SmarterMail to Plesk after updating SmarterMail to 100.0.9735: component shows as Not configured
• Emails forwarded between two mailboxes for the same domain hosted on a Plesk server are marked as spam due to the sender domain's DMARC policy
• Unable to send email to Yahoo mailboxes from a Linux Plesk server: said: 550 5.7.25 Forward-confirmed reverse DNS failed tnmpmscs
• See all 562 articles

DNS & Statistics

• Error when generating FTP statistics on a Linux Plesk server where the locale is set to something other than English
• Vulnerability CVE-2026-65646 in Plesk's DNS zone management functionality
• How to remove AWStats component from Plesk?
• How to change statistics tool from AWStats to GoAccess for domains in Plesk?
• Why was AWStats deprecated, what tool replaces it, and what happens to existing servers and domains that still use AWStats?
• AWStats traffic significantly differs from Plesk traffic stats in a domain
• See all 142 articles

Website Builder

• Plesk Sitejet domain fail to publish with permissions error for .well-known directory: filemng: Error occurred during /bin/rm command.
• Sitejet Builder can not be opened for a Plesk domain: Error: Could not connect to Website Builder API
• Error opening Site Builder: pm_Exception: You don't have permission to perform this action
• Plesk Sitejet Builder editing error: Can not access Sitejet Website Builder for this domain after migration.
• Unable to publish website created in Web Presence Builder: APIv1 is deprecated. Please, switch to the new APIv3
• Unable to find Web Presence Builder in Plesk Installer
• See all 24 articles