Proxmox vulnerabilities

Products

• Virtual Environment 9
• Mail Gateway 5
• Libpve-storage-perl 2
• Mail Gateway 2
• Pmg-api 2
• Pve Http Server 2

Newest

• proxmox pmg-api In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval... CVE-2026-94588 4.4 MediumSeptember 21, 2026
• proxmox libpve-storage-perl libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML... CVE-2026-51080 9.8 CriticalJuly 17, 2026
• proxmox virtual environment A stored cross-site scripting (XSS) vulnerability exists in the WebAuthn Relying Party field... CVE-2025-57540 5.4 MediumSeptember 9, 2025
• proxmox virtual environment A stored cross-site scripting (XSS) vulnerability in the U2F Origin field of the Datacenter... CVE-2025-57539 5.4 MediumSeptember 9, 2025
• proxmox virtual environment A stored cross-site scripting (XSS) vulnerability in the HTTP Proxy field within the Datacenter... CVE-2025-57538 5.4 MediumSeptember 9, 2025
• proxmox virtual environment, libpve-common-perl (promox mail gateway 8), libpve-common-perl (promox ve 8) +5 more +7 more Proxmox Virtual Environment is an open-source server management platform for enterprise... CVE-2024-21545 Public exploit 8.2 HighSeptember 24, 2024
• proxmox proxmox-widget-toolkit Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via... CVE-2023-46854 5.4 MediumOctober 28, 2023
• proxmox backup server, mail gateway, virtual environment +2 more An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1... CVE-2023-43320 8.8 HighSeptember 27, 2023
• proxmox virtual environment A reflected cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment prior to v7.2... CVE-2022-31358 9.0 CriticalDecember 14, 2022
• proxmox mail gateway, virtual environment, pve http server +2 more Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when... CVE-2022-35508 9.8 CriticalDecember 4, 2022
• proxmox mail gateway, virtual environment, pve http server +2 more A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and... CVE-2022-35507 7.1 HighDecember 4, 2022
• proxmox virtual environment Proxmox VE prior to 3.2: 'AccessControl.pm' User Enumeration Vulnerability CVE-2014-4156 5.3 MediumJanuary 27, 2020
• proxmox mail gateway Open redirect vulnerability in Proxmox Mail Gateway prior to hotfix 4.0-8-097d26a9 allows remote... CVE-2015-9058 6.1 MediumMay 3, 2017
• proxmox mail gateway Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway prior to hotfix 4.0-8... CVE-2015-9057 6.1 MediumMay 3, 2017
• proxmox mail gateway Multiple cross-site scripting (XSS) vulnerabilities in Proxmox Mail Gateway before 3.1-5829 allow... CVE-2014-2325 4.3 MediumMarch 14, 2014