CVE-2026-51080CWE-611xxe

CVE-2026-51080

Critical · published July 17, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
43.2
In the wild
Unconfirmed
What it is

libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00517 · 43.2th percentile
Weakness
CWE-611 · Improper Restriction of XML External Entity Reference
Published
2026-07-17T18:17Z
Affected products (2)
ProductVersionsFixed in
proxmox/libpve-storage-perlall versions—
proxmox/libpve-storage-perlall versions—
References (1)
https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/post-849970 · [email protected]
EPSS history
Timeline
  • 17 JUL 00:00Z
    libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability
    cvelistv5