Vendor

    Proxmox

    19 known vulnerabilities in products by Proxmox, 0 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Proxmox
    CriticalCVE-2023-54391

    Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

    		9.8
    HighCVE-2023-43320

    Proxmox Backup Server: Privilege Escalation

    		8.8
    CriticalCVE-2022-35508

    Proxmox Mail Gateway 4.0-4/B38FC5D9: Server-Side Request Forgery (SSRF)

    		9.8
    CriticalCVE-2022-31358

    Proxmox Virtual Environment: Cross-Site Scripting (XSS)

    		9.0
    CriticalCVE-2026-51080

    Proxmox Libpve-storage-perl: XML External Entity (XXE)

    		9.8
    HighCVE-2022-35507

    Proxmox Mail Gateway 4.0-4/B38FC5D9: CRLF Injection

    		7.1
    HighCVE-2026-51082

    Proxmox Virtual Environment: Race Condition

    		7.2
    MediumCVE-2014-4156

    Proxmox Virtual Environment: security vulnerability

    		5.3
    MediumCVE-2026-51083

    Proxmox Virtual Environment: Improper Access Control

    		6.5
    MediumCVE-2015-9058

    Proxmox Mail Gateway 4.0-4/B38FC5D9: Open Redirect

    		6.1
    MediumCVE-2015-9057

    Proxmox Mail Gateway 4.0-4/B38FC5D9: Cross-Site Scripting (XSS)

    		6.1
    HighCVE-2024-21545

    Proxmox Pve-manager: External Control of File Name or Path

    		8.2
    MediumCVE-2026-51081

    Proxmox Virtual Environment: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2026-94588

    Proxmox Pmg-api: Argument Injection

    		4.4
    MediumCVE-2025-57538

    Proxmox Virtual Environment: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2023-46854

    Proxmox-widget-toolkit: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2025-57540

    Proxmox Virtual Environment: Cross-Site Scripting (XSS)

    		5.4
    MediumCVE-2025-57539

    Proxmox Virtual Environment: Cross-Site Scripting (XSS)

    		5.4
    Not ratedCVE-2014-2325

    Proxmox Mail Gateway: Cross-Site Scripting (XSS)

    		—

    News

    Products

    Products by Proxmox
    Virtual Environment110
    Proxmox Mail Gateway 4.0-4/B38FC5D950