TGViewer
Netlas.io Netlas.io @netlas · 2.31K subscribers
Post #623 964
Authentication bypass in Proxmox VE with public exploit and active exploitation, no CVE assigned yet ❗️

A recently disclosed vulnerability in EOL releases of Proxmox VE allows unauthenticated remote attackers to log in as root without a password. Public PoC now exists! This vulnerability is being actively exploited in the wild!

Search at Netlas.io:
👉 Link: https://nt.ls/qLCVL
👉 Dork: tag.name:"proxmox_ve"

Vendor's advisory:
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#-subject-psa-2026-00043-1-authentication-bypass-in-eol-proxmox-ve-7-release
  • 🔥 3
  • ❤ 1
More from @netlas
  1. Sep 22, 2026CVE-2026-93952: Improper Input Validation in VeloCloud Orchestrator, 10.0 Rating 🔥 A rece…
  2. Sep 21, 2026CVE-2026-13684 and others: Multiple vulnerabilities in Synology DSM, up to 9.8 Rating 🔥 S…
  3. Sep 18, 202611 new vulnerabilities in WordPress, no CVE assigned yet ❗️ WordPress 7.1.1 security relea…
  4. Sep 17, 2026CVE-2026-20329 and others: Multiple vulnerabilities in Cisco ASA, up to 9.9 Rating 🔥 Cisc…
  5. Sep 16, 2026CVE-2026-61642: Request smuggling is possible in Squid proxy, 7.7 Rating 🔥 A recently dis…
  6. Sep 15, 2026CVE-2026-78006 & CVE-2026-78159: Two unauthenticated vulnerability chains leading to RCE i…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →