Proxmox
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| pmg-api | 2 | – | Sep 21, 2026 |
| libpve-common-perl (Promox Mail Gateway 8) | 1 | – | Sep 24, 2024 |
| libpve-common-perl (Promox VE 8) | 1 | – | Sep 24, 2024 |
| libpve-http-server-perl | 1 | – | Sep 24, 2024 |
| libpve-storage-perl | 1 | – | Sep 24, 2024 |
| pve-manager | 1 | – | Sep 24, 2024 |
Exploited and recent CVEs
- CVE-2026-94588 In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality. This is caused by improper handling of user-supplied input passed to the underlying apt 0.2%
- CVE-2024-21545 Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 0.4%
- CVE-2024-21545 Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 0.4%
- CVE-2024-21545 Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 0.4%
- CVE-2024-21545 Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 0.4%
- CVE-2024-21545 Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 0.4%
- CVE-2024-21545 Proxmox Virtual Environment is an open-source server management platform for enterprise virtualization. Insufficient safeguards against malicious API response values allow authenticated attackers with 0.4%