CVE-2026-51082General

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A race condition between the vncproxy and vncwebsocket API calls in Proxmox Virtual Environment (PVE) 9.x pve-manager before 9.1.9 and 8.x before 8.4.19; qemu-server 9.x before 9.1.7 and 8.x before 8.4.7; and pve-container before 6.1.3 (PVE 9.x) and before 5.3.4 (PVE 8.x) allows an attacker with privileges to call "vncproxy" to hijack a VNC session that is established in parallel by a different user for a different VM.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-849971

Weakness type (CWE)

CWE-362

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
General: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

General

150.0%

Patch

150.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

ExploitGrid@exploitgrid92d
General
🚨 Critical CVEs today: CVE-2026-9810 (WordPress AI Copilot unauth RCE), CVE-2026-16089 (Keycloak OAuth2 auth code bypass), CVE-2026-15343 (GitHub Dependabot path traversal to RCE), CVE-2026-51082 (Proxmox VE hash dump). Full breakdowns → http://exploitgrid.net #CVE #InfoSec
Post summary
The tweet lists several high‑impact CVEs with brief technical descriptors and links to a page for full breakdowns, but it does not provide PoC, exploit code, patch info, or evidence of active exploitation.
0000096
26 followersView on X
VulniPulse@vulnipulse92d
Patch
⚠️ Proxmox Virtual Environment alert: CVE-2026-51082 (Unknown) Attackers could affect the listed product. Upgrade to a vendor-listed fixed release. https://vulnipulse.com/advisories/proxmox-cve-2026-51082 #Proxmox #CyberSecurity #CVE
Post summary
An advisory alerts users to an unknown vulnerability in Proxmox Virtual Environment and recommends upgrading to the vendor‑released fix, but it does not provide technical details or evidence of exploitation.
0000041
6 followersView on X

Explore more

Back to dashboard