Summary
Ein Angreifer kann mehrere Schwachstellen in Proxmox Virtual Environment ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, und um einen Cross-Site Scripting Angriff durchzuführen.
Product
Proxmox Virtual Environment (PVE) ist eine Virtualisierungsplattform für Server.
Vulnerabilities 3
-
High 7.2
A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager b…
-
Medium 6.5
Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows …
-
Medium 6.1
A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environme…
Revision history
-
#2
Referenzen ergänzt, Bewertung angepasst
-
#1
Initiale Fassung
References
-
Proxmox Virtual Environment Security Advisories vom 2026-04-23
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#-subject-psa-2026-00013-1-ova-import-xml-xxe-file-disclosure-and-server-side-request-forgery
-
Proxmox Virtual Environment Security Advisories vom 2026-04-23
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#-subject-psa-2026-00014-1-multiple-vnc-related-issues
-
Proxmox Virtual Environment Security Advisories vom 2026-04-23
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#-subject-psa-2026-00015-1-missing-ha-permission-checks-when-auto-adding-guest-on-create-restore
-
Proxmox Virtual Environment Security Advisories vom 2026-04-23
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#-subject-psa-2026-00016-1-stored-xss-in-vm-notes-field
-
Proxmox Virtual Environment Security Advisories vom 2026-04-23
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2#-subject-psa-2026-00017-1-missing-redaction-of-cloudinit-cipassword-in-cloudinit-dump-endpoint