Vulnerability

Proxmox Virtual Environment - Security Advisories

Platform

Proxmox VE

Published

20 July 2026

Views

Summary

Kaynakta özet metni bulunmuyor.

Source

Üretici duyurusunu aç

Bu kayıt otomatik olarak içeri alınmıştır; yayına almadan önce içeriği doğrulayın.

Proxmox VE — Related Advisories

VIEW ALL →

Proxmox VE 01 Sep 2026

Critical · 9.3

CVE-2023-54391 — Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-contro

Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value in the API login endpoint. Attackers can send a POST request to the access ticket API endpoint with any value in the tfa-challenge parameter to completely skip password verification

CVE-2023-54391 Vulnerability 43

Proxmox VE 05 Aug 2026

Release / Development

Proxmox Virtual Environment now available for 64-bit ARM (arm64)!

Proxmox Virtual Environment now available for 64-bit ARM (arm64)! is available.

Proxmox VE 17 Jul 2026

Medium · 6.1

CVE-2026-51081 — A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environmen

A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PVE) 8.x 4.3.16 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.

CVE-2026-51081 Vulnerability 45