Proxmox Virtual Environment: Schwachstelle ermöglicht Erlangen von Administratorrechten

Summary

Product

Vulnerabilities 1

• Critical 9.8
  CVE-2023-54391 Public exploit Scanner template

  Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

  Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by sup…

  Proxmox Server Solutions Proxmox Virtual Environment (VE) Virtualization
  Sep 1, 2026

Revision history

1. 2026-09-01 #1

   Initiale Fassung

References

• Proxmox Security Advisory vom 2026-09-01
  https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929
• EU Vulnerability Database vom 2026-09-01
  https://euvd.enisa.europa.eu/enisa/EUVD-2023-60613
• Exploit + PoC
  https://nebusec.ai/buglist/PSA-2026-00043-1/