RCE in Webpros Plesk Extension "Site Import"
CVE-2026-87898
OS command injection in Plesk allows remote authenticated users to execute arbitrary code with root privileges.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.