(⁠◔⁠‿⁠◔⁠) Are you OK？✨ Thinking...https://tg.okhk.nethttps://tg.okhk.net/posts/11155https://tg.okhk.net/posts/11155Wed, 02 Sep 2026 09:34:42 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4910" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b>🔴</b></i> <mark class="highlight">Proxmox</mark> VE 远程提权漏洞；建议升级至 PVE 9。<br /><br />- 骇客可以通过 API 访问未启用 2FA 的账户（包括 root）。<br />- 官方建议更新至依然支持的版本，也就是 PVE 9；PVE 8 已于 8/31 结束支持。<br />- ……或者执行 mitigation 代码。<br />- 影响 libpve-access-control 的 7.0-7（含）至 8.0.4（不含）版本，但这个版本号和 PVE 版本号并非对应关系。<br /><br /><a href="https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4#post-867929" target="_blank" rel="noopener" title="forum.proxmox.com/~">forum.proxmox.com/~</a><br /><br /><a href="/search/result?q=%23Proxmox" title="#Proxmox">#Proxmox</a><a class="tgme_widget_message_link_preview" href="https://forum.proxmox.com/threads/proxmox-virtual-environment-security-advisories.149331/page-4" target="_blank" rel="noopener" title="Subject: PSA-2026-00037-1: SCTPhantom Local Privilege Escalation issueAdvisory date: 2026-08-10Packages: proxmox-kernel-*Details:A use-after-free issue in the Linux kernels SCTP code..."> <i class="link_preview_right_image" style="background-image:url('https://cdn4.telesco.pe/file/YfHdB64o5MGHlVkFiQ75ki6_RQsGBJdNN4mKNh1QaksxfvxI8LACky87YnNz2kp4M-Uetqt48iSrNoxWeGoa0wo0c-pvt8ONhHjBHZJI3CM8Gm6J1DxntPyQj8GoYtzdqY_nSqyZGYo_VSmpsDo_2L1f_IsnAielJsBWkp4MBcYr36RaBpg5Ra3t2Yx8i_stlVZVTyD9xjUud9YSGIP4o4wtXiEHmCu5bRWxS6sFl14y3fWVc1zxJtTH_1J5xhqVhKDV2QsEjHGbKLNux1IgBXXeUpFflbLHCjBC8FGbyBG-G0hVidv3CVTZ2igMF5tKxA7eH3FkgiVrReSrVIs2kw.jpg')"></i> <div class="link_preview_site_name accent_color">Proxmox Support Forum</div> <div class="link_preview_title"><mark class="highlight">Proxmox</mark> Virtual Environment - Security Advisories</div> <div class="link_preview_description">Subject: PSA-2026-00037-1: SCTPhantom Local Privilege Escalation issue<br /><br />Advisory date: 2026-08-10<br /><br />Packages: <mark class="highlight">proxmox</mark>-kernel-*<br /><br />Details:<br /><br />A use-after-free issue in the Linux kernels SCTP code...</div> </a>