Proxmox

Mentions · 7d0
Mentions · 30d0
All mentions4
First seenSep 4, 2026
Last mentionedSep 21, 2026

Timeline

4 articles · newest first

Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation

GreyNoise tracks 'Red Heron' actor exploiting multiple vulnerabilities including novel ZyXEL CVE-2026-7273 and stealing 18,000+ government records.

GreyNoiseSep 21, 00:00 UTC · Sep 21, 2026Threat actorExploitedCVE-2026-7273 CVE-2026-34908 CVE-2026-34909+93 · 1 read

Scans for Proxmox Servers, (Wed, Sep 9th)

SANS observed increased scanning and brute-force attacks on port 8006 targeting unsupported Proxmox VE 7 servers after a recent vulnerability advisory.

SANS Internet Storm CenterSep 9, 17:46 UTC · Sep 9, 2026Exploit / PoC2

Agents Gone Wild: An AI-Orchestrated Global Campaign Against PaperCut NG/MF

AI-orchestrated campaign exploited PaperCut NG/MF RCE (CVE-2026-81578/82078), compromising 440+ instances at 395 organizations in 48 countries.

GreyNoiseSep 9, 00:00 UTC · Sep 9, 2026Threat actorExploitedCVE-2026-81578 CVE-2026-82078 CVE-2021-42278+14 · 1 read

Synology ActiveProtect Manager 2.0 improves AI-driven security

Synology released ActiveProtect Manager 2.0, expanding backup coverage to EC2, Azure, Proxmox and Google Workspace, with AI anomaly detection and malware scanning coming in 2.1.

Help Net SecuritySep 4, 00:00 UTC · Sep 4, 2026Tools2 · 1 read

Related CVEs

by mentions

CVE-2026-3491090%10.0
Unauthenticated Command Injection in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti (ui) UniFi OSKEVPoC
CVE-2026-3490968%10.0
Unauthenticated Path Traversal in Ubiquiti UniFi OS Devices
published May 22, 2026Ubiquiti UniFi OS ServerKEVPoC
CVE-2026-6000424%9.8
Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
published Aug 26, 2026GiteaKEVPoC ×4
CVE-2026-6303011%9.8
WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE
published Jul 17, 2026WordPress CoreKEVPoC ×7
CVE-2026-72733%8.8
Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability
published Jun 16, 2026Zyxel GS1900 Series SwitchesKEVPoC
CVE-2026-8157884%8.8
Missing Authentication for Critical Function in PaperCut NG/MF Web Interface
published Aug 28, 2026PaperCut MFKEV
CVE-2021-4228777%7.5
Privilege Escalation in Microsoft Active Directory Domain Services
published Nov 10, 2021microsoft windows server 2004KEVRansomware
CVE-2026-54569<1%9.8
SENAITE.CORE: The SENAITE.CORE JSON API permits unauthenticated remote code execution through a two-request chain involving missing…
published Aug 26, 2026
CVE-2026-56271<1%9.3
Flowise before 3.1.0 (affected versions 3.0.13 and earlier) uses weak hardcoded default JWT secrets ('auth_token', 'refresh_token') and default audience and…
published Jul 12, 2026flowiseai flowise
CVE-2026-797565%8.7
Unauthenticated OS Command Injection in Nuclio Dashboard (Local/Docker Platform)
published Sep 2, 2026Nuclio (open-source project) Nuclio Dashboard (local/Docker platform)

Appears with

Proxmox VEproduct · 3
Ubiquitivendor · 2
GreyNoiseorganization · 2
Cloudflareorganization · 1
Amazonvendor · 1
SANS Internet Storm Centerorganization · 1
Googlevendor · 1
Synology ActiveProtect Managerproduct · 1
Giteaorganization · 1
SonicWallvendor · 1
Nutanixvendor · 1
Red Heronthreat actor · 1
PaperCutorganization · 1
Giteavendor · 1
Cloudflarevendor · 1
Microsoftvendor · 1

Entities are extracted by the model from each article. First seen Sep 4, 2026, last mentioned Sep 21, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.