← Database

CVE-2026-51083

MEDIUM CVSS: 6.5 Published: 2026-07-17 Modified: 2026-07-17

Description

Incorrect access control in Proxmox Virtual Environment (PVE) 9.x qemu-server before 9.1.8 and 8.x before 8.4.8 allows users within limited privileges to obtain hashed passwords via the cloudinit/dump API.

Affected Platforms

Unknown

Weakness Type

CWE-284

References