Cross-Site Scripting Vulnerability in Proxmox Virtual Environment
CVE-2026-51081

6.1MEDIUM

Key Information:

Vendor

Proxmox

Status
Proxmox Virtual Environment
Vendor
CVE Published:
17 July 2026

What is CVE-2026-51081?

Proxmox Virtual Environment (PVE) 9.x 5.1.8 and 8.x 4.3.16 are susceptible to a cross-site scripting (XSS) vulnerability, allowing malicious actors to inject arbitrary scripts or HTML through a crafted payload. This exploit can potentially compromise user sessions and lead to unauthorized actions in the web application, emphasizing the need for immediate attention and remediation.

References

https://forum.proxmox.com/threads/proxmox-virtual-environ...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.