Loading vulnerability database

CVE-2025-66430: Improper Access Control | Rapid7 Vulnerability Database

CVE-2025-66430: Improper Access Control

Plesk 18.0 has Incorrect Access Control.

CVSS Details

CVSS 3.1 Base Score: 9.1
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)

Prioritise with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

CVE details

CVSS v4 ScoreN/A

CVSS v3 Score

9.1 Critical

EPSS Score0%

EPSS Percentile14%

In CISA KEV CatalogueFalse

Published

Dec 12, 2025

The Command Platform

Respond faster and outpace attackers. Taking command of your attack surface starts here.

Explore platform

Capabilities

Attack Surface Management
Reveal & protect coverage gaps
Exposure Management
Identify & remediate at-risk data
Vulnerability Management
Pinpoint & eliminate risk
CyberGRC
Manage governance, risk & compliance

Next-Gen SIEM
Investigate with AI-driven detections
Threat Intelligence Platform
Recognize & mitigate adversaries
AI-Powered Security Operations
Automate & optimize workflows
Cloud-Native Application Protection
Discover & defend sensitive data
Application Security
Scan & simplify dev workflows

Explore the platform

Talk to an Expert
Attack Surface Management Free Trial
InsightVM Free Trial
Product Tours
Customer Stories

MDR Services

Managed Detection and Response
Preemptive MDR that disrupts attackers
MDR for Microsoft
Maximize and protect your Microsoft investment
MDR for Enterprise
Get customized protection for enterprise systems
MDR ROI Calculator
See how MDR can boost your ROI

Rapid7 MDR vs. Competitors
Decide which solution fits

Exposure Management

Managed Vulnerability Management
Get help pinpointing exposures
Continuous Red Teaming
Get help validating exposures
Managed Application Security
Get help securing dev workflows
Penetration Testing Services
Get help with defense assessment

Threat Alert Center

Rapid7 Labs
RESEARCH
Intelligence, Threat Data & Research
Emergent Threat Response
Latest on the blog
Vulnerability & Exploit Database
Search thousands of CVEs

Learn

Blog
Webinars and Events
Resource Library
Cybersecurity Fundamentals

Product

Product Documentation
Product Release Notes
Product Extensions
Product Toolkits

Customer Support

Customer Support
Rapid7 Forum

Partner With Rapid7

Partnerships Overview
PACT Partner Program
Expand & enrich customer experience
PACT for Service Providers
Unlock SOC efficiencies

For Customers

Partner Directory
Find Resellers, MSSPs and Distributors
Technology Partners
Strengthen your security stack
AWS Partnership
Secure AWS resource types

Partner portal

Partner Login
Become a Partner
Develop & win business

Company

About Us
Leadership Team
Our Customers
Careers
Contact Us

Media

Newsroom
Awards and Recognition
Investors

In the community

Social Good
Culture
Boston Bruins Partnership

The Command Platform
Respond faster and outpace attackers. Taking command of your attack surface starts here.
Explore platform
Capabilities
Attack Surface Management
Reveal & protect coverage gaps
Exposure Management
Identify & remediate at-risk data
Vulnerability Management
Pinpoint & eliminate risk
CyberGRC
Manage governance, risk & compliance
Next-Gen SIEM
Investigate with AI-driven detections
Threat Intelligence Platform
Recognize & mitigate adversaries
AI-Powered Security Operations
Automate & optimize workflows
Cloud-Native Application Protection
Discover & defend sensitive data
Application Security
Scan & simplify dev workflows
Explore the platform
Talk to an Expert
Attack Surface Management Free Trial
InsightVM Free Trial
Product Tours
Customer Stories
All Products
MDR Services
Managed Detection and Response
Preemptive MDR that disrupts attackers
MDR for Microsoft
Maximize and protect your Microsoft investment
MDR for Enterprise
Get customized protection for enterprise systems
MDR ROI Calculator
See how MDR can boost your ROI
Rapid7 MDR vs. Competitors
Decide which solution fits
Exposure Management
Managed Vulnerability Management
Get help pinpointing exposures
Continuous Red Teaming
Get help validating exposures
Managed Application Security
Get help securing dev workflows
Penetration Testing Services
Get help with defense assessment
All services
MDR Buyer's Guide
Find the best MDR partner for your business
READ NOW
Threat Alert Center
Rapid7 Labs
RESEARCH
Intelligence, Threat Data & Research
Emergent Threat Response
Latest on the blog
Vulnerability & Exploit Database
Search thousands of CVEs
Learn
Blog
Webinars and Events
Resource Library
Cybersecurity Fundamentals
Product
Product Documentation
Product Release Notes
Product Extensions
Product Toolkits
Customer Support
Customer Support
Rapid7 Forum
Partner With Rapid7
Partnerships Overview
PACT Partner Program
Expand & enrich customer experience
PACT for Service Providers
Unlock SOC efficiencies
For Customers
Partner Directory
Find Resellers, MSSPs and Distributors
Technology Partners
Strengthen your security stack
AWS Partnership
Secure AWS resource types
Partner portal
Partner Login
Become a Partner
Develop & win business
Grow your business
Security where your customers need it
Become a partner
Company
About Us
Leadership Team
Our Customers
Careers
Contact Us
Media
Newsroom
Awards and Recognition
Investors
In the community
Social Good
Culture
Boston Bruins Partnership

Contact Get demo

Get Started

Command Platform

Exposure Management

Take Action

Start a Free Trial

Take a Product Tour

Get Breach Support

Company

About Us

Leadership

Newsroom

Our Customers

Partner Programs

Investors

Careers

Stay Informed

Blog

Emergent Threat Response

Webinars & Events

Rapid7 Labs Research

Vulnerability Database

Security Fundamentals

For Customers

Sign In

Support Portal

Product Documentation

Extension Library

Rapid7 Academy

Customer Escalation Portal

Contact Support

+1-866-390-8113

Follow Us

© Rapid7

Legal Terms Privacy Policy Export Notice Trust Cookie List Accessibility Statement