Technical Questions

Security

• Vulnerability CVE-2026-68489: Arbitrary code execution as root in Plesk's Node.js Toolkit and Ruby extensions
• Vulnerability in Plesk's Backup Manager: symlink race during restore allows root privilege escalation
• Vulnerability in Plesk's Backup Manager: unsigned backup header allows path traversal
• How to enable secure TLS versions and ciphers in Plesk for Linux?

Plesk Service/Interface

• Which directories should be added to antivirus exclusion on a Plesk for Windows server?
• Vulnerability CVE-2026-67397: Arbitrary code execution as root in Plesk
• How to enable detailed error reporting for Plesk interface on Windows Server
• CVE-2026-67394: Vulnerability in Plesk allows privilege escalation to root
• Domain count per PHP handler in Plesk does not match the number of items in the filtered list
• How to change the recipients of Plesk Security Advisory, Product News, and Security Updates emails for a Plesk Partner account
• See all 712 articles

Other

• How to secure a Plesk server
• How to monitor usage of system resources in a period of time using atop
•  What to do if Plesk server was hacked?
• How to diagnose a DoS/DDoS attack and find websites under attack on a Plesk server
• Vulnerability CVE-2026-64639: Privilege Escalation via Database Cloning in Plesk
• Vulnerability CVE-2026-9256
• See all 490 articles

Webserver

• HTTP/3 connections to websites on a Plesk server fail intermittently: sendmsg() failed (90: Message too long) while sending frames
• Vulnerability CVE-2026-49975: HTTP/2 Bomb
• Vulnerability: CVE-2026-42945: DoS and RCE in nginx before 1.31.1/1.30.1
• Is Plesk affected by CVE-2026-23918? (Double Free and possible RCE in Apache http2 module)
• Preferred domain redirect does not work when Nginx is not installed in Plesk
• What do the HTTP status codes that you see in Plesk server logs mean in general?
• See all 531 articles

Applications & Extensions

• How to secure WordPress installations in Plesk
• What DDoS protection tools are available in Plesk
• What to do if a WordPress website is hacked or infected?
• How to edit Plesk panel.ini
• How to install Let's Encrypt SSL certificate for a domain in Plesk?
• Unable to set up Multi-Factor Authentication (MFA) under customer or reseller account in Plesk: QR code is not displayed
• See all 706 articles

Backup, Restore & Migration

• Plesk migration in Windows fails: certificate verify failed: EE certificate key too weak
• Vulnerability CVE-2026-65647 in Plesk's Site Import and Migrator extensions
• Plesk Migrator fails: APS database assignment error: Not a gzipped file (b'PK')
• How to restore a remote full server backup in a new Plesk server?
• Plesk backup task finishes with the warning: Could not back up all data from the directory '/var/qmail/mailnames/example.com'
• Best Practices for Plesk and Server Backups
• See all 388 articles

Databases

• Error adding a domain in Plesk: DB query failed: Unknown column 'disabled_with_parent' in 'field list'
• Vulnerability CVE-2026-65642 in Plesk's database management interface
• Vulnerability in Plesk’s MS SQL database user password update mechanism
• MSSQL 'sa' user locked out: Login failed for user 'sa'
• Can't install MariaDB in Plesk Windows: FATAL ERROR: Can't create data directory 'N:\MySQL-Data' (one or more intermediate directories do not exist)
• Unable to log in to Plesk: Table 'psa.smb_componentUpdates' doesn't exist in engine
• See all 261 articles

Installation & Upgrade

• How to update Plesk Obsidian to the latest build
• How to make an in-place upgrade of a Plesk server from CloudLinux 7 to CloudLinux 8?
• How to make an in-place upgrade of a Plesk server from AlmaLinux 8 to AlmaLinux 9?
• Is Ubuntu 26.04 supported by Plesk?
• MariaDB upgrade via Plesk interface fails: curl: (28) Operation timed out after 15000 milliseconds with 0 bytes received
• Plesk Update fails with errors: Integrity constraint violation: 1062 Duplicate entry db_name db\_name' for key 'PRIMARY'
• See all 271 articles

Mail

• Some emails fail to open in Plesk Premium Email (Kolab) webmail with a 500 error or a blank page
• Unable to connect SmarterMail to Plesk after updating SmarterMail to 100.0.9735: component shows as Not configured
• Delivery Status Notifications (DSN) sent between local mailboxes are marked as spam by DMARC
• SpamAssassin rules can't be updated on CentOS 7 server with Plesk: config: SpamAssassin failed to parse line, is not valid for "util_rb_3tld"
• Is Roundcube 1.4 secured against CVE-2026-25916 and CVE-2026-26079 in Plesk?
• Integrating SmarterMail 100.0.9560 with Plesk fails: Login failure: Missing auth
• See all 558 articles

DNS & Statistics

• Vulnerability CVE-2026-65646 in Plesk's DNS zone management functionality
• How to remove AWStats component from Plesk?
• How to change statistics tool from AWStats to GoAccess for domains in Plesk?
• Why was AWStats deprecated, what tool replaces it, and what happens to existing servers and domains that still use AWStats?
• AWStats traffic significantly differs from Plesk traffic stats in a domain
• How to enable the local DNS zone for a Plesk domain?
• See all 141 articles

Website Builder

• Plesk Sitejet domain fail to publish with permissions error for .well-known directory: filemng: Error occurred during /bin/rm command.
• Sitejet Builder can not be opened for a Plesk domain: Error: Could not connect to Website Builder API
• Error opening Site Builder: pm_Exception: You don't have permission to perform this action
• Plesk Sitejet Builder editing error: Can not access Sitejet Website Builder for this domain after migration.
• Unable to publish website created in Web Presence Builder: APIv1 is deprecated. Please, switch to the new APIv3
• Unable to find Web Presence Builder in Plesk Installer
• See all 24 articles