<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Plesk Obsidian Release Notes]]></title><description><![CDATA[Plesk Obsidian Release Notes]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/</link><generator>Plesk Docs</generator><lastBuildDate>Wed, 16 Sep 2026 14:37:13 GMT</lastBuildDate><copyright><![CDATA[&copy; 2026 WebPros International GmbH. All rights reserved. Plesk and the Plesk logo are trademarks of WebPros International GmbH.]]></copyright><item><title><![CDATA[Plesk Obsidian 18.0.81]]></title><description><![CDATA[### What's New?

- [+] The AI Assistant now supports multiple conversations: start a new chat without losing the one you were in, browse and reopen past conversations in a history list filtered by "Active" and "Archived", and archive the ones you are done with. It also asks a clarifying question when your request is too general to answer well - for example, "DNS server off" now prompts you to confirm whether you want to disable the service or need help with a problem with it - instead of guessing and acting on the wrong interpretation.

- [+] You can now connect an MCP client to your Plesk server through your WebPros Account, authenticating as your linked Plesk user with no Plesk credential stored on the client side. The feature is disabled by default and configurable, including which user types may connect, via the new `[webProsAccount]` section of `panel.ini`.

- [+] The Plesk DNS diagnostic tool, [introduced in beta in Plesk Obsidian 18.0.80](https://docs.plesk.com/release-notes/obsidian/change-log/) as a CLI and REST API tool, is now generally available with a full user interface: a "Troubleshoot DNS" link appears on domains with a suspected issue and opens a readable report in Plesk. The underlying checks were also reworked for clarity, merging redundant MX checks, flagging DNSSEC and nameserver failures as a single clear result, and adding a domain expiry check.

  **Note:** The feature does not yet cover domain aliases.

- [+] (Plesk for Linux) Plesk now supports Ubuntu 26.04 for production use, with Plesk extensions updated for compatibility with this OS. [Learn more about Ubuntu 26.04 support](https://support.plesk.com/hc/en-us/articles/40102608347031-Is-Ubuntu-26-04-supported-by-Plesk).

- [+] Prepared [a script to automate dist-upgrade from Debian 12 to Debian 13](https://github.com/plesk/debian12to13).

  Note that MariaDB 10.11 is upgraded to MariaDB 11.8 as part of the procedure, because Debian 13 no longer ships MariaDB 10.x.

  [Learn how to dist-upgrade to Debian 13](https://support.plesk.com/hc/en-us/articles/12377714344983-How-to-perform-dist-upgrade-procedure-on-Linux-server-with-Plesk).

- [+] (Plesk for Windows) Added support for in-place upgrade from Windows Server 2016 to Windows Server 2025, taking advantage of Windows Server 2025's ability to upgrade across up to four versions at once. Previously only the upgrade from Windows Server 2019 was supported. [Learn how to perform an in-place upgrade](https://docs.plesk.com/en-US/obsidian/administrator-guide/server-administration/plesk-for-windows-inplace-server-upgrade.80025/).

- [+] (Plesk for Linux) The Node.js Toolkit now supports pnpm: a project with a `pnpm-lock.yaml` file is detected and installed with pnpm automatically, with no CLI workarounds needed, and the package manager can also be chosen on the Node.js Toolkit dashboard.

  **Note:** pnpm is available in Plesk for Linux only.

- [+] Managing Node.js applications no longer means opening every domain one at a time. A new "Node.js" item in the navigation pane opens a single list of every domain with Node.js enabled, showing the version, package manager, and application mode for each, with a link to that domain's management page. The former main page (the list of installed Node.js versions) is now the "Node Version" tab.

- [+] Enabling Node.js on a domain that already has app files can now auto-configure the hosting for you: Plesk detects the framework (Express, Next.js, NestJS, Nuxt.js, Vanilla Node.js, or a static frontend such as React, Vue.js, Angular, or Vite) and generates a Passenger-compatible startup file, handles hardcoded ports, and sets the document root, showing what changed before you confirm. Static frontends are built and served without a persistent Node.js process.

- [+] SSL It! now supports DNS validation as an alternative to HTTP when installing or reissuing a certificate, so customers whose port 80 is closed can still obtain and renew certificates. Plesk displays the required DNS records and remembers your choice per domain for future renewals.

  **Note:** This is specific to SSL It! (its ext-acme and ext-letsencrypt integrations); other certificate providers are not affected.

### Feature Improvements

- [*] (Plesk for Linux) When a Node.js application fails to start, visitors now see a generic Plesk error page instead of the Phusion Passenger fallback page in production mode; development mode is unchanged.

- [*] (Plesk for Linux) The Docker extension now writes sensible container log rotation defaults to `/etc/docker/daemon.json` on a fresh installation, so container logs can no longer grow without limit and fill up the server disk. Existing configurations are never overwritten, and the defaults can still be edited by hand.

- [*] The Log Browser extension can now filter log entries by the PID:request-id identifier, from a dedicated filter field or by clicking an identifier in the list.

- [*] The Let's Encrypt extension, which SSL It! DNS validation (above) builds on, now validates every name on a certificate individually instead of only wildcard names, and shows the exact DNS records still needed for domains or aliases whose zone Plesk does not manage. Requires SSL It! 1.23.0 or later.

- [*] Plesk Migrator added an `sshConnectionTimeout` setting for the SSH connection to the source server, added support for migrating from Ubuntu 26.04, and no longer removes shared databases and database users from the source server when a migrated subscription is removed. This update also addresses a critical security issue; upgrading is recommended.

### Deprecated and Removed Items

- [!] Debian 11 has reached its end of life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.81 is the last Plesk Obsidian release to support Debian 11.

  If you are running Plesk Obsidian on Debian 11, we recommend that you [dist-upgrade those servers to Debian 12](https://support.plesk.com/hc/en-us/articles/12377714344983-How-to-perform-dist-upgrade-procedure-on-Linux-server-with-Plesk) using [our dist-upgrade tool](https://github.com/plesk/debian11to12), or migrate the hosted domains to Plesk Obsidian servers running a supported OS.

- [!] We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

- [!] The AI Assistant entry point in the search bar has been removed; the AI Assistant is now reached only through the dedicated chat button in the top right corner of the interface. 

- [!] (Plesk for Windows) Node.js 20 has been removed from the Plesk distribution, following its end of life on April 30, 2026. It can no longer be installed via Plesk. Node.js 20 remains available from the Node.js website and can be installed manually outside of Plesk.

### Fixed Product Issues

- [-] Fixed an issue where running the `plesk bin extension --upgrade` command reported that the extension had been upgraded successfully even when nothing was upgraded, leaving the extension on its old version while the interface continued to show the update as pending. (PPPM-15493)
- [-] Fixed an issue where changing the Plesk administrator's interface language via the `plesk bin admin --update -locale <lang_code>` command or the XML API did not fully apply the change, leaving parts of the interface in the previous language. (PPPM-15483)
- [-] Fixed an issue where the number of domains shown for a PHP handler on the "Tools & Settings" > "PHP Settings" page did not match the number of entries in the list opened by clicking that number, because domain aliases were counted separately from their parent domains. (PPPM-15472)
- [-] Fixed an issue where clicking the PHP icon next to a domain in the "Domains" list redirected to the panel home page with the "Permission denied" and "An invalid URL was requested" errors if the previously opened domain was a different one. (PPPM-15462)
- [-] Fixed an issue where registering an existing database in Plesk added the `disable_remote_db_remove` flag to the domain regardless of whether the database server was local or remote, so that deleting any database of that domain afterwards removed it from Plesk only and left it in place on the database server. (PPPM-15435)
- [-] Fixed an issue where, with "Sync the DNS zone with the primary domain" enabled for a domain alias, changing the SOA email (RNAME) of the primary domain was not propagated to the alias. (PPPM-15344)
- [-] Fixed an issue where the AI Support Assistant rejected valid questions written in Japanese with the "Please enter at least two words" error, because the validation counted words by spaces. Questions in languages that do not separate words with spaces are now accepted as written. (PAUX-7206)
- [-] Fixed an issue where text added at the end of the file in the Panel.ini Editor extension was displayed in a different color from the rest of the file. (EXTPLESK-4480)
- [-] Fixed an issue in the Performance Booster extension where the extension's page rendered blank, and reapplying Performance Booster failed, if custom PHP-FPM pool directives placed after the Performance Booster block contained an escaped quote. (EXTPLESK-14240)
- [-] Fixed an issue in the Laravel Toolkit where a "Table is not detected" error was logged to `panel.log` when the "Scheduled Tasks" option was disabled, even though nothing was actually wrong. (EXTPLESK-14220)

#### Linux

- [-] Fixed an issue where an autoresponder crashed instead of replying when it received a malformed email, for example one forwarded from an external provider with non-compliant headers. (PPPM-15489)
- [-] Fixed an issue where clicking "Manage the list" for a mailing list whose name contained uppercase characters resulted in the "Page not found" error. (PPPM-15481)
- [-] Fixed an issue where running the `plesk sbin sslmng` command with a cipher list containing no TLS 1.3 ciphersuites appended an empty `<IfModule mod_ssl.c>` block to the Apache `ssl.conf` file on every run, so the file kept growing. (PPPM-15476)
- [-] Fixed an issue where the `plesk repair fs` command scanned the same directory once per domain when several domains shared a document root, repeating the same findings and making the command take much longer than necessary. (PPP-72696)
- [-] Fixed an issue where, on servers running on AlmaLinux 10 with SELinux in enforcing mode, SSH public key authentication failed for subscription system users with the "Permission denied (publickey)" error even though the file permissions were correct. (PPPM-15468)
- [-] Fixed an issue where an exception trace involving a PHP anonymous class wrote a NUL byte into the `panel.log` file, causing tools such as `grep` to treat the log as a binary file and some editors to truncate the entry. (PPPM-15467)
- [-] Fixed an issue where the web statistics pages generated by the Plesk daily task were always in English, ignoring the locale of the user who owned the domain. Recalculating the statistics by hand produced the page in the correct language, which then reverted to English after the next daily run. (PPPM-15464)
- [-] Fixed an issue where additional domains added to a subscription whose main domain used the "No web hosting" hosting type were not displayed on the subscription's page, although they were listed on the "Domains" screen. (PPPM-15459)
- [-] Fixed an issue where changing the web application firewall ruleset update period via the `plesk bin server_pref` command had no effect when the CRS ruleset was used, while changing it in the interface worked. (PPPM-15454)
- [-] Fixed an issue where assigning an externally installed CloudLinux ALT-PHP handler to a subscription reported success but wrote an unresolvable `tuxcare-php-X.Y` value to the subscription's `.php-version` file, so that running PHP from the command line failed with the "version is not installed" error. (PPPM-15444)
- [-] Fixed an issue where running the `plesk repair dns` command on a DNSSEC-signed zone removed the `dnssec-policy` section from the `named.conf` file while the zone still referred to it, so that BIND failed to reload. (PPPM-15337)
- [-] Fixed an issue where, if domain creation failed after the outgoing mail settings had been applied, those settings were not rolled back, so that creating a domain with the same name again failed with the "column name is not unique" error. (PPPM-13825)
- [-] Fixed an issue where the disk usage threshold notification email sent by the Watchdog extension showed the `<fs_size>` and `<used_size>` placeholders instead of the actual capacity and used disk space values. (EXTPLESK-14223)
- [-] Fixed an issue where, on servers using qmail as the mail server, outgoing email sent through authenticated SMTP was not signed with DKIM even when DKIM was enabled for the domain. (PPPM-15503)
- [-] Fixed an issue where running global web statistics processing broke the `.webstat` hardlink for domains that had Web Statistics disabled, leaving behind an orphaned log file. (PPPM-15500)
- [-] Fixed an issue where updating the server hostname in Plesk did not update the `/etc/hostname` file if the hostname already matched at the OS level, leaving the file out of sync when it had been changed outside Plesk without a reboot. (PPPM-15474)
- [-] Fixed an issue where valid PHP-FPM pool directives entered in a domain's additional PHP configuration were silently dropped if they were not on Plesk's recognized list, with no warning shown in the interface. (PPPM-15460)
- [-] Fixed an issue where changing a domain's Dedicated PHP-FPM handler version left behind an orphaned systemd symlink for the previous PHP version. (PPPM-15455)
- [-] Fixed an issue in the Git extension where, after switching to a non-main branch and pulling, the "Latest commits" panel kept showing commits from the main branch instead of the selected one. (EXTPLESK-14222)
- [-] Fixed an issue in the Laravel Toolkit where running an npm script that invoked PHP used the server's default PHP version instead of the version configured in the domain's PHP settings. (EXTPLESK-9635)
- [-] Fixed an issue in the .NET Toolkit where clicking the ".NET" button on a domain's "Get Started" card immediately disabled Apache and switched PHP-FPM to being served through nginx, before any .NET application had been enabled. (EXTPLESK-5727)

#### Windows

- [-] Fixed an issue where Plesk could not be integrated with SmarterMail build 9735. (PPPM-15497)
- [-] Fixed an issue where, on servers running on Windows Server 2025, the "Tools & Settings" > "Server Components" page showed the ASP.NET version as a raw build number instead of "ASP.NET 4.8.1". (PPPM-15478)
- [-] Fixed an issue where resuming a suspended domain re-enabled its scheduled backup tasks even if they had been disabled before the domain was suspended. (PPPM-15470)

### Changes in Third-Party Components

- [*] Updated OWASP ModSecurity CRS to version 4.29.0.

#### Linux

- [*] Updated ProFTPD to version 1.3.9d.
- [*] Updated Phusion Passenger to version 6.2.0.
- [*] Updated the PostgreSQL client libraries used by sw-engine to version 18.6.
- [*] Updated Postfix to version 3.5.27 (CentOS 7, CloudLinux 7 and 8, AlmaLinux 8, and Ubuntu 18.04 only).
- [*] Updated msmtp to version 1.8.34.

#### Windows

- [*] Updated ASP.NET Core Runtime to versions 10.0.11, 9.0.19, and 8.0.30.
- [*] Updated Git for Windows to version 2.55.0.5.
- [*] Updated OpenSSL to version 3.5.8.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18081</link><guid isPermaLink="false">62ae25f55a50e2fdfbee83e9168d19f6</guid><pubDate>Tue, 15 Sep 2026 00:00:00 GMT</pubDate><product>plesk</product><version>18.0.81</version><release>18.0</release><update>81</update><latest>true</latest></item><item><title><![CDATA[Joomla! Toolkit 3.0.15]]></title><description><![CDATA[-   [-] Fixed the issue where Joomla! instances were linked to the wrong subscription after a server migration, and were registered a second time by an instance scan or import. (EXTPLESK-10008, EXTPLESK-10003)
-   [-] Fixed the issue where it was not possible to install Joomla! to a domain after enabling PHP support. (EXTPLESK-14111)
-   [-] Fixed the issue where a scheduled backup was removed right after creation if the scheduled backup limit was set to unlimited. (EXTPLESK-14078)
-   [-] Fixed the issue where installing Joomla! failed with a non-informative error message when a required PHP extension (json, mysqli, phar) was disabled for the selected PHP handler. (EXTPLESK-467)
-   [-] Fixed the issue where entering a reserved username (such as "admin" or "root") for the Joomla! administrator account during installation silently created the account under a different username. (EXTPLESK-5282)
-   [*] Security improvements. (EXTPLESK-4152)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#joomla-toolkit-3.0.15</link><guid isPermaLink="false">a9b0082f7a342d7877fa11d59478fb83</guid><pubDate>Tue, 15 Sep 2026 00:00:00 GMT</pubDate><product>joomla-toolkit</product><version>3.0.15</version></item><item><title><![CDATA[Watchdog 3.2.0]]></title><description><![CDATA[-   [+] Added support for Ubuntu 26.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#watchdog-3.2.0</link><guid isPermaLink="false">26a50fdd8c6383b16fe748e97c1c1753</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>watchdog</product><version>3.2.0</version></item><item><title><![CDATA[Support SSH Access 1.3.0]]></title><description><![CDATA[-   [+] Ubuntu 26.04 is now supported.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#support-ssh-access-1.3.0</link><guid isPermaLink="false">10f819b9da2917bc4fcbd5a70a36ffe4</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>support-ssh-access</product><version>1.3.0</version></item><item><title><![CDATA[Scheduled Backups List 1.2.3]]></title><description><![CDATA[-   [*] Security improvements.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#scheduled-backups-list-1.2.3</link><guid isPermaLink="false">99324e12e568ed9a57e647c2c49b195d</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>scheduled-backups-list</product><version>1.2.3</version></item><item><title><![CDATA[Ruby 1.6.6]]></title><description><![CDATA[-   [!] This update addresses a critical security issue. We strongly recommend that you apply it as soon as possible.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#ruby-1.6.6</link><guid isPermaLink="false">526aeaa06505f19bedd53dfc655477d5</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>ruby</product><version>1.6.6</version></item><item><title><![CDATA[Plesk Migrator 2.36.1]]></title><description><![CDATA[-  [-] Migration of subscriptions without physical hosting no longer fails with the "Failed to adjust common migrated applications for new environment" error. (PMT-5698)
-  [-] Migration from DirectAdmin no longer copies the home directory of an account into the mailbox of the account owner in an addon domain. (PMT-4968)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-migrator-2.36.1</link><guid isPermaLink="false">c43fc8e3ab61ecb596a1c004d7f16c7b</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>plesk-migrator</product><version>2.36.1</version></item><item><title><![CDATA[Panel.ini Editor 3.2.15]]></title><description><![CDATA[-   [-] Fixed an issue where the panel.ini configuration could be lost because "Reset to defaults" reset it without asking for confirmation. (EXTPLESK-4203)
-   [-] Fixed an issue where the editor kept showing the previous content after "Reset to defaults" until the page was reloaded. (EXTPLESK-9681)
-   [-] Fixed an issue where a grave accent in panel.ini caused all the text below it to be highlighted in a different color. (EXTPLESK-4480)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#panel-ini-editor-3.2.15</link><guid isPermaLink="false">d08314a5b63b45de7dd870b959b1971a</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>panel-ini-editor</product><version>3.2.15</version></item><item><title><![CDATA[NTP Timesync 1.4.0]]></title><description><![CDATA[-   [+] Added support for Ubuntu 26.04.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#ntp-timesync-1.4.0</link><guid isPermaLink="false">101152c81847a1272f250876e5a7e43b</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>ntp-timesync</product><version>1.4.0</version></item><item><title><![CDATA[Node.js Toolkit 2.5.0]]></title><description><![CDATA[-   [!] This update addresses a critical security issue. We strongly recommend that you apply it as soon as possible.
-   [+] Added support for Ubuntu 26.
-   [+] Add generic error page for broken Node.js application.
-   [+] In Plesk for Linux, the extension now supports the pnpm package manager.
-   [+] Added a new page listing all domains where a Node.js application is installed.
-   [+] Added one-click auto-configuration of hosting for Node.js apps.
-   [-] Fixed an issue where pnpm could not be installed on the server. (EXTPLESK-14259)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#nodejs-2.5.0</link><guid isPermaLink="false">d66ddaf8b340b63a9e7234b3ceb9d732</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>nodejs</product><version>2.5.0</version></item><item><title><![CDATA[Multi-Factor Authentication 1.3.2]]></title><description><![CDATA[- [*] Security improvements.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#multi-factor-authentication-1.3.2</link><guid isPermaLink="false">9057d7ed7051088c98ef523c32b31d8a</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>multi-factor-authentication</product><version>1.3.2</version></item><item><title><![CDATA[Log Browser 1.10.0]]></title><description><![CDATA[-   [+] Added the ability to filter Plesk log entries by the PID:request-id identifier: use the dedicated filter field, or click an identifier in the list to toggle the filter. (EXTPLESK-14179)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#log-browser-1.10.0</link><guid isPermaLink="false">2828b2854d8291c935ccc4ee8b06cb6f</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>log-browser</product><version>1.10.0</version></item><item><title><![CDATA[Laravel Toolkit 1.6.1]]></title><description><![CDATA[-   [-] Fixed an issue where npm scripts run from the Node.js panel used the system PHP version instead of the PHP version configured for the domain. (EXTPLESK-9635)
-   [-] Fixed an issue where the "Table is not detected" error was written to panel.log when a Laravel application had no scheduled tasks. (EXTPLESK-14220)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#laravel-toolkit-1.6.1</link><guid isPermaLink="false">0987ec7f5acd344f7202cddf76457234</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>laravel-toolkit</product><version>1.6.1</version></item><item><title><![CDATA[Grafana 1.7.3]]></title><description><![CDATA[-   [-] The extension no longer fails to install or upgrade with the "Grafana-server Init Failed: Could not find config defaults" error on servers running Grafana 13. (EXTPLESK-14178)
-   [-] A system update no longer upgrades Grafana to a major version the extension does not support when a third-party Grafana repository is configured on the server. (EXTPLESK-14178)
-   [-] Monitoring no longer breaks after a server migration or backup restore with an "unexpected error". (EXTPLESK-9018)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#grafana-1.7.3</link><guid isPermaLink="false">9ac20f026d7c43fe91c3e46bf7d3440a</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>grafana</product><version>1.7.3</version></item><item><title><![CDATA[Git 2.5.10]]></title><description><![CDATA[-   [-] The "Latest commits" list no longer switches back to the default branch after pulling a non-default branch on newer Git versions. (EXTPLESK-14222)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#git-2.5.10</link><guid isPermaLink="false">02e7322736b5dc9f88378e69ef4f0831</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>git</product><version>2.5.10</version></item><item><title><![CDATA[Plesk Email Security 1.5.32]]></title><description><![CDATA[-   [+] Added support for CloudLinux 9.
-   [-] The setup CLI command now checks for a valid hostname. (EXTPLESK-14250)
-   [-] Fixed an error that could prevent the Plesk Home page from opening, or make the Email Security buttons disappear, for users whose Plesk account has no email address set. (EXTPLESK-14227)
-   [-] Fixed Amavis failing to start after installation on Debian 10, RHEL, CloudLinux, and other distributions where the required Perl DBD driver was missing. (EXTPLESK-8788)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#email-security-1.5.32</link><guid isPermaLink="false">93aba29eb5f849db4e0538b33d6f7485</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>email-security</product><version>1.5.32</version></item><item><title><![CDATA[.NET Toolkit 2.5.0]]></title><description><![CDATA[-   [+] Ubuntu 26.04 is now supported.
-   [-] Fixed an issue where opening a domain's .NET page disabled Apache proxy mode immediately, instead of only after the application was enabled. (EXTPLESK-5727)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#dotnet-toolkit-2.5.0</link><guid isPermaLink="false">95d182947711e04c20fd9e8ad0ef5f15</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>dotnet-toolkit</product><version>2.5.0</version></item><item><title><![CDATA[Docker 2.2.0]]></title><description><![CDATA[-   [+] Added support for Ubuntu 26.04.
-   [+] Installing the Docker extension now writes default container log rotation settings (`json-file` driver, `max-size` 20m, `max-file` 5) to `/etc/docker/daemon.json`, so that container logs can no longer grow without limit and fill up the server disk. The settings are only applied to a Docker that the extension installs itself: a Docker that was already present on the server is left untouched, as are any existing logging settings in `daemon.json`. The defaults apply to newly created containers only. (PPP-72796)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#docker-2.2.0</link><guid isPermaLink="false">5a773f721aa62d9f883e8213ce86167d</guid><pubDate>Mon, 14 Sep 2026 00:00:00 GMT</pubDate><product>docker</product><version>2.2.0</version></item><item><title><![CDATA[Plesk Obsidian 18.0.80 Update 7]]></title><description><![CDATA[### Fixed Product Issues

- [!] This update addresses two critical security issues with the Plesk Backup Manager:

  - [Symlink race during restore allows root privilege escalation (CVE-2026-68488)](https://support.plesk.com/hc/en-us/articles/43248932867351-Vulnerability-in-Plesk-s-Backup-Manager-symlink-race-during-restore-allows-root-privilege-escalation).

  - [Unsigned backup header allows path traversal (CVE-2026-68487)](https://support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversal).

  We **strongly** recommend that you apply it as soon as possible.

### Changes in Third-Party Components

#### Linux

-   [*] Updated Roundcube to version 1.6.19.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18080-mu7</link><guid isPermaLink="false">810b5dc3f46cc1a01fcc3847e998f0d9</guid><pubDate>Thu, 10 Sep 2026 00:00:00 GMT</pubDate><product>plesk</product><version>18.0.80</version><release>18.0</release><update>80</update><fix>7</fix><latest>false</latest></item><item><title><![CDATA[Plesk Obsidian 18.0.79 Update 11]]></title><description><![CDATA[### Fixed Product Issues

- [!] This update addresses two critical security issues with the Plesk Backup Manager:

  - [Symlink race during restore allows root privilege escalation (CVE-2026-68488)](https://support.plesk.com/hc/en-us/articles/43248932867351-Vulnerability-in-Plesk-s-Backup-Manager-symlink-race-during-restore-allows-root-privilege-escalation).

  - [Unsigned backup header allows path traversal (CVE-2026-68487)](https://support.plesk.com/hc/en-us/articles/43248841638551-Vulnerability-in-Plesk-s-Backup-Manager-unsigned-backup-header-allows-path-traversal).

  We **strongly** recommend that you apply it as soon as possible.

### Changes in Third-Party Components

#### Linux

-   [*] Updated Roundcube to version 1.6.19.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18079-mu11</link><guid isPermaLink="false">6562f83ed164fa3668b475d6be214d4b</guid><pubDate>Thu, 10 Sep 2026 00:00:00 GMT</pubDate><product>plesk</product><version>18.0.79</version><release>18.0</release><update>79</update><fix>11</fix><latest>false</latest></item><item><title><![CDATA[Monitoring 2.11.3]]></title><description><![CDATA[-   [-] The Grafana frame on the Monitoring page no longer shows a second scrollbar after the update to Grafana 12. (EXTPLESK-14101)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#monitoring-2.11.3</link><guid isPermaLink="false">221b426f24fde65c59e52cf0572517d6</guid><pubDate>Tue, 08 Sep 2026 00:00:00 GMT</pubDate><product>monitoring</product><version>2.11.3</version></item><item><title><![CDATA[Plesk Obsidian 18.0.80 Update 6]]></title><description><![CDATA[### Fixed Product Issues

- [!] This update addresses a [critical security issue](https://support.plesk.com/hc/en-us/articles/43070000520855-Vulnerability-CVE-2026-67397-Arbitrary-code-execution-as-root-in-Plesk). We **strongly** recommend that you apply it as soon as possible.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18080-mu6</link><guid isPermaLink="false">50289ccf0ce903d2534396a055ed86df</guid><pubDate>Wed, 02 Sep 2026 00:00:00 GMT</pubDate><product>plesk</product><version>18.0.80</version><release>18.0</release><update>80</update><fix>6</fix><latest>false</latest></item><item><title><![CDATA[Plesk Obsidian 18.0.79 Update 10]]></title><description><![CDATA[### Fixed Product Issues

- [!] This update addresses a [critical security issue](https://support.plesk.com/hc/en-us/articles/43070000520855-Vulnerability-CVE-2026-67397-Arbitrary-code-execution-as-root-in-Plesk). We **strongly** recommend that you apply it as soon as possible.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18079-mu10</link><guid isPermaLink="false">1338fecbbcb8632e70d188278ff0af7d</guid><pubDate>Wed, 02 Sep 2026 00:00:00 GMT</pubDate><product>plesk</product><version>18.0.79</version><release>18.0</release><update>79</update><fix>10</fix><latest>false</latest></item><item><title><![CDATA[SSL It! 1.23.0]]></title><description><![CDATA[-   [*] Whether a domain is validated over HTTP or via DNS records is now a property of the domain itself instead of a server-wide option. On upgrade, every domain the retired `forceDnsChallengeForWildcardOrders` option actually applied to — those whose ACME CA certificates were issued with it — keeps being validated via DNS; the option itself is no longer read. (EXTPLESK-13623)
-   [-] A certificate order with DANE support no longer fails with an error when the certificate authority has not issued the certificate yet. (EXTPLESK-13623)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#ssl-it-1.23.0</link><guid isPermaLink="false">236c918b30ac312e2ddd95c5ac0e84a6</guid><pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate><product>ssl-it</product><version>1.23.0</version></item><item><title><![CDATA[Let's Encrypt 3.5.0]]></title><description><![CDATA[-   [+] SSL/TLS certificates can now be issued and renewed with DNS validation for every name of the certificate, not for wildcard names only: each name is validated with its own "_acme-challenge" TXT record. Requires SSL It! 1.23.0 or later. (EXTPLESK-13623)
-   [*] TXT records of several ACME DNS challenges can now coexist at one host: handling one challenge no longer removes the records of another challenge of the same order, and repeated processing runs no longer create duplicate records. (EXTPLESK-13623)
-   [*] Pending certificate orders now present the awaited DNS records as a table showing the exact record names the certificate authority queries, records Plesk cannot create itself included: a domain whose DNS zone is not managed by Plesk, or a domain alias that keeps a DNS zone of its own. (EXTPLESK-13623)
-   [*] The "_acme-challenge" TXT records created for an order are now removed once the order is issued, cancelled, or replaced, so they no longer stay in the DNS zone. (EXTPLESK-13623)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#lets-encrypt-3.5.0</link><guid isPermaLink="false">17622a37d33f1ddee82d09ea0ff2a9fa</guid><pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate><product>lets-encrypt</product><version>3.5.0</version></item><item><title><![CDATA[ACME SSL 1.2.0]]></title><description><![CDATA[-   [+] SSL/TLS certificates can now be issued and renewed with DNS validation for every name of the certificate, not for wildcard names only: each name is validated with its own "_acme-challenge" TXT record. Requires SSL It! 1.23.0 or later.
-   [*] Pending certificate orders now present the awaited DNS records as a table showing the exact record names the certificate authority queries, records Plesk cannot create itself included: a domain whose DNS zone is not managed by Plesk, or a domain alias that keeps a DNS zone of its own.
-   [*] A failed domain validation now names the domain name it happened for, both in the panel and in the notifications about scheduled renewals.
-   [*] The "_acme-challenge" TXT records of an order the certificate authority no longer accepts are now removed as soon as the order is replaced, instead of staying in the DNS zone.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#ssl-it-1.2.0</link><guid isPermaLink="false">f23c7681a1930215e248bed815ac6958</guid><pubDate>Tue, 01 Sep 2026 00:00:00 GMT</pubDate><product>ssl-it</product><version>1.2.0</version></item><item><title><![CDATA[PHP Updates]]></title><description><![CDATA[- [*] Updated PHP 8.5 to version 8.5.10.
- [*] Updated PHP 8.4 to version 8.4.25.

### Linux

-   [*] Updated static ImageMagick used for Red Hat Enterprise Linux 8-based and later systems to 6.9.13-55 for PHP 8.4.
-   [*] Updated static ImageMagick used for Red Hat Enterprise Linux 8-based and later systems to 7.1.2-30 for PHP 8.5.

### Windows

-   [*] Microsoft Drivers for PHP 8.3-8.5 for SQL Server updated to 5.3.13.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#php-260831</link><guid isPermaLink="false">a485a3d08abcd7d325cf2512cae5c973</guid><pubDate>Mon, 31 Aug 2026 00:00:00 GMT</pubDate><product>php</product><version>2026-08-31</version></item><item><title><![CDATA[Plesk Obsidian 18.0.80 Update 5]]></title><description><![CDATA[### Fixed Product Issues

- [!] This update addresses a [critical security issue (CVE-2026-67394)](https://support.plesk.com/hc/en-us/articles/42968165026967). We **strongly** recommend that you apply it as soon as possible.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18080-mu5</link><guid isPermaLink="false">8ca748ee800a2640bcd1529d998f5ead</guid><pubDate>Thu, 27 Aug 2026 00:00:00 GMT</pubDate><product>plesk</product><version>18.0.80</version><release>18.0</release><update>80</update><fix>5</fix><latest>false</latest></item><item><title><![CDATA[Plesk Obsidian 18.0.79 Update 9]]></title><description><![CDATA[### Fixed Product Issues

- [!] This update addresses a [critical security issue (CVE-2026-67394)](https://support.plesk.com/hc/en-us/articles/42968165026967). We **strongly** recommend that you apply it as soon as possible.]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#plesk-18079-mu9</link><guid isPermaLink="false">246b6235f3c8a7acef374f2ecc06ec09</guid><pubDate>Thu, 27 Aug 2026 00:00:00 GMT</pubDate><product>plesk</product><version>18.0.79</version><release>18.0</release><update>79</update><fix>9</fix><latest>false</latest></item><item><title><![CDATA[WP Toolkit 6.11.2]]></title><description><![CDATA[- [-] Remote management plugin is now correctly removed from a remote WordPress 7.1 site when the site is detached. (EXTWPTOOLK-14861)
- [-] Eliminated periodic "WP Toolkit data processing failed" errors in the log. (EXTWPTOOLK-14864)]]></description><link>https://docs.plesk.com/release-notes/obsidian/change-log/#wordpress-toolkit-6.11.2</link><guid isPermaLink="false">38ed024b20dcd0176e043b9bd15a33ab</guid><pubDate>Tue, 25 Aug 2026 00:00:00 GMT</pubDate><product>wordpress-toolkit</product><version>6.11.2</version></item></channel></rss>