← Back

CVE-2026-51080

nvd nist
Published: Jul 17, 2026Modified: Aug 11, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.

Affected (2)

Proxmox
1 product
Libpve Storage Perl
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Proxmox
Libpve Storage Perl
Version 8.3.7
Libpve Storage Perl
Version 9.1.1

Related CWEs

CWE-611
Improper Restriction of XML External Entity Reference
The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (1)

Source: cve@mitre.org
Issue TrackingVendor Advisory

Timeline

No history available yet.