Vulnerability

Proxmox Virtual Environment - Security Advisories

Platform
Proxmox VE
Published
20 July 2026
Views
45
Primary source: Review the official advisory at forum.proxmox.com Go to Source

Summary

Kaynakta özet metni bulunmuyor.

Source

Bu kayıt otomatik olarak içeri alınmıştır; yayına almadan önce içeriği doğrulayın.

Proxmox VE — Related Advisories

VIEW ALL →
Proxmox VE 01 Sep 2026
Critical · 9.3

CVE-2023-54391 — Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-contro

Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value in the API login endpoint. Attackers can send a POST request to the access ticket API endpoint with any value in the tfa-challenge parameter to completely skip password verification

CVE-2023-54391 Vulnerability 43