CVE-2023-54391 Scanner
CVE-2023-54391 Scanner - Default Credentials vulnerability in Proxmox VE
Used 13 times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2023-54391
9.3
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by supplying an arbitrary tfa-challenge value in the API login endpoint. Attackers can send a POST request to the access ticket API endpoint with any value in the tfa-challenge parameter to completely skip password verification, gaining unauthorized access including to the root@pam account. All affected releases are end of life.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
proxmox virtual environment (ve)
Updated Nov 7, 2026View on NVD →
S4E scanner
CVE history: proxmox virtual environment (ve)
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →