psa-2026-00043-recovery

psa-2026-00043-recovery Recovering from a wiper that presented as ransomware, after an attack against internet-exposed Proxmox infrastructure PSA-2026-00043-1 / CVE-2023-54391. The attacker wiped guests and left the filesystems damaged. Two recovery tracks depending on what the guest was: databas...

Proxmox VE - Default Credentials with TFA Bypass

Detected Proxmox VE was accessible using default root@pam credentials combined with a TFA challenge bypass. An attacker could authenticate as root by submitting the default password "root@pam" along with a crafted tfa-challenge parameter, thereby bypassing two-factor authentication enforcement an...

CVE-2023-54391

creationtimestamp| type| source ---|---|--- 2026-09-02 00:07:28+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muind3kccw2y 2026-09-02 07:00:04+00:00| published-proof-of-concept| Telegram/L869WNav7vzXw39wLdvXg-MBNN7bxZc7DZJlvFKYsnuTe-I 2026-09-02 10:15:31+00:00| seen|...