EUVD-2026-45181
GHSA-qqmv-hgv3-7gx2
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Network-delivered reflected XSS with no attacker auth required, victim interaction mandatory, and scope change to browser session; no availability impact.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
A cross-site scripting (XSS) vulnerability in Proxmox Virtual Environment (PVE) 9.x 5.1.8 and Proxmox Virtual Environment (PVE) 8.x 4.3.16 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.
AnalysisAI
Cross-site scripting in Proxmox Virtual Environment (PVE) 8.x and 9.x allows an unauthenticated remote attacker to inject and execute arbitrary JavaScript in the browser of an authenticated PVE user who interacts with a crafted payload. The CVSS scope change (S:C) confirms the injected script executes outside the originating component's security context, enabling session hijacking, credential theft, or unauthorized management actions against the hypervisor web UI. SSVC classifies exploitation status as none with no automation possible, and no active exploitation or public exploit code has been identified at time of analysis.
Technical ContextAI
CWE-79 (Improper Neutralization of Input During Web Page Generation - Cross-site Scripting) identifies the root cause as insufficient sanitization or encoding of user-supplied input before it is rendered in the Proxmox VE web management interface. Proxmox VE is an open-source virtualization management platform built on Debian Linux, combining KVM hypervisor and LXC container support with a web-based administration UI. The CPE data provided (cpe:2.3:a:n/a:n/a) is uninformative and does not identify the specific PVE component or sub-package where the injection point resides. The CVSS S:C (scope changed) metric indicates the injected script can affect resources - such as the user's authenticated browser session or DOM - beyond the vulnerable server-side component itself, which is the canonical CVSS representation of reflected or stored XSS in a web application.
RemediationAI
No exact patched version is identifiable from the available intelligence - the Proxmox forum advisory at https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-849973 should be consulted for the definitive fixed package version and upgrade instructions. As a compensating control, restrict access to the Proxmox web management interface (default port 8006) to trusted administrative networks or VPN only, preventing external attackers from delivering crafted payloads to internal users. Additionally, enforce Content Security Policy (CSP) headers on the PVE web UI if supported by the installed version, which can limit the impact of XSS by restricting script execution origins. Administrators should also train PVE users to avoid clicking external links while authenticated to the management console. None of these controls substitute for applying the vendor-released patch once a confirmed fix version is available.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today