A Three-Year-Old Proxmox Fix Just Became an Emergency

A passwordless Proxmox VE authentication bypass was fixed in 2023 but disclosed three years later, leaving exposed end-of-life control planes at urgent risk.

A passwordless Proxmox VE authentication bypass was fixed in 2023 but disclosed three years later, leaving exposed end-of-life control planes at urgent risk.

CISA says attackers are exploiting a Switchvox SQL injection that turns one unauthenticated web request into operating-system command execution.