Proxmox VE

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 4, 2026
Last mentionedSep 22, 2026

Timeline

4 articles · newest first

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A Chinese-linked actor exploited WordPress and Zyxel flaws, stealing government records from dozens of organizations.

BleepingComputerSep 22, 20:35 UTC · Sep 22, 2026Threat actorExploitedCVE-2026-63030 CVE-2026-60137 CVE-2026-7273+95 · 2 reads

Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation

GreyNoise tracks 'Red Heron' actor exploiting multiple vulnerabilities including novel ZyXEL CVE-2026-7273 and stealing 18,000+ government records.

GreyNoiseSep 21, 00:00 UTC · Sep 21, 2026Threat actorExploitedCVE-2026-7273 CVE-2026-34908 CVE-2026-34909+93 · 1 read

Scans for Proxmox Servers, (Wed, Sep 9th)

SANS observed increased scanning and brute-force attacks on port 8006 targeting unsupported Proxmox VE 7 servers after a recent vulnerability advisory.

SANS Internet Storm CenterSep 9, 17:46 UTC · Sep 9, 2026Exploit / PoC2

Synology ActiveProtect Manager 2.0 improves AI-driven security

Synology released ActiveProtect Manager 2.0, expanding backup coverage to EC2, Azure, Proxmox and Google Workspace, with AI anomaly detection and malware scanning coming in 2.1.

Help Net SecuritySep 4, 00:00 UTC · Sep 4, 2026Tools2 · 1 read

Related CVEs

by mentions

CVE-2026-3490968%10.0
Unauthenticated Path Traversal in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti UniFi OS ServerKEVPoC
CVE-2026-3490888%10.0
Improper Access Control in Ubiquiti UniFi OS Devices (CVE-2026-34908)
published May 22, 2026Ubiquiti UniFi OS ServerKEVPoC
CVE-2026-3491090%10.0
Unauthenticated Command Injection in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti (ui) UniFi OSKEVPoC
CVE-2026-6000424%9.8
Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
published Aug 26, 2026GiteaKEVPoC ×4
CVE-2026-6303011%9.8
WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE
published Jul 17, 2026WordPress CoreKEVPoC ×7
CVE-2026-72733%8.8
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
published Jun 16, 2026Zyxel GS1900 Series SwitchesKEVPoC
CVE-2022-084793%7.8
Local Privilege Escalation ('Dirty Pipe') in the Linux Kernel
published Mar 10, 2022Linux KernelKEVPoC ×4
CVE-2026-54569<1%9.8
SENAITE.CORE: The SENAITE.CORE JSON API permits unauthenticated remote code execution through a two-request chain involving missing…
published Aug 26, 2026
CVE-2026-56271<1%9.3
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and…
published Jul 12, 2026flowiseai flowise
CVE-2026-797565%8.7
Unauthenticated OS Command Injection in Nuclio Dashboard (Local/Docker Platform)
published Sep 2, 2026Nuclio (open-source project) Nuclio Dashboard (local/Docker platform)

Appears with

Proxmoxvendor · 3
WordPressproduct · 2
Giteaproduct · 2
SENAITE LIMSproduct · 2
FlowiseAIproduct · 2
Nuclioproduct · 2
PAN-OS GlobalProtectproduct · 2
Zyxelvendor · 2
UniFi OSproduct · 2
GreyNoiseorganization · 2
Red Heronthreat actor · 2
Ubiquitivendor · 2
Zyxel GS1900product · 2
Proxmoxorganization · 1
Azure VMproduct · 1
Giteaorganization · 1

Entities are extracted by the model from each article. First seen Sep 4, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.