Dashboard / CVE-2025-65518

CVE-2025-65518

1 PoC
INFO Priority: 0.00 BB Relevance: 10/100
Published: 2026-01-08 Modified: 2026-11-04 First seen: 2026-11-04 Status: pending_score

Description

Plesk Obsidian versions 8.0.1 through 18.0.73 are vulnerable to a Denial of Service (DoS) condition. The vulnerability exists in the get_password.php endpoint, where a crafted request containing a malicious payload can cause the affected web interface to continuously reload, rendering the service unavailable to legitimate users. An attacker can exploit this issue remotely without authentication, resulting in a persistent availability impact on the affected Plesk Obsidian instance.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
webpros plesk_obsidian 8.0.1 – 18.0.73

References & Advisories (5)

Proof of Concept (1)

—
https://github.com/Jainil-89/CVE-2025-65518
nomi-sec

Bug Bounty Relevance

10 / 100
✓ PoC available (1)

CVSS Score

Unscored

EPSS — Exploitation Probability

0.61%
Raw Score 0.006120
Percentile 49.9%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00612
2026-11-12
0.00612
2026-11-10
0.00612
2026-11-09
0.00612
2026-11-08
0.00612
2026-11-07
0.00612
2026-11-06
0.00612
2026-11-05
0.00612
2026-11-04
0.00612

Intelligence Sources

nvd ref →

External Links