Unrated severityNVD Advisory· Published Jul 17, 2026· Updated Jul 17, 2026

CVE-2026-51083

Description

Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API.

Affected products

Proxmox/Virtual Environmentllm-fuzzy
Range: <9.1.8, <8.4.8

Patches

Vulnerability mechanics

References

forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-2mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000