现在我也不知道这频道发了啥了，各位慢慢吃瓜，将就着看联系我请去 @abc1763613206友链儿@cyberElaina@rvalue_daily@billchenlahttps://channel.0w0.besthttps://channel.0w0.best/posts/7693https://channel.0w0.best/posts/7693Tue, 01 Sep 2026 00:15:12 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/hatschannel/6148" target="_blank" rel="noopener"><span>HAT's Public Channel | <i class="emoji" style="background-image:url('//telegram.org/img/emoji/40/F09FABAA.png')"><b>🫪</b></i></span></a></div><a href="/search/result?q=%23%E9%A3%8E%E9%99%A9%E9%A2%84%E8%AD%A6" title="#风险预警">#风险预警</a><br /><br />本频道从多信源整理, PVE WebUI 近期极有可能已出现严重 RCE 0day 安全漏洞 (并已出现在野利用报告)，从 PVE7 (已 EOL, 建议立即更新) 到 PVE8 (已知报告版本: 8.0.3 / 8.2 / 8.4) 全系列均已被攻破，可绕过身份验证。<br /><br /><blockquote>操作建议:<br /><br />1) 立即停止将任何 PVE WebUI / WebAPI (8006) / SSH 直接暴露公网；<br />2) 如一定需要暴露公网，也尽可能利用 VPN (e.g. Tailscale) / SD-WAN / Cloudflare Zero-Trust (One) 为 PVE WebUI 增加二层防护 (或者最简单的: 加个 basic auth)；在 sshd config 中也禁止使用密码登录；<br />3) 哪怕 PVE 仅部署在内网，也请配置好 IP-ACL Rule；<br />4) PVE &lt;=8 已正式 EOL，无论如何都请更新到 PVE 9；<br />5) 非常建议 PVE9 也采取以上安全措施建议；<br />6) 近期在运维时需要投入更多精力关注 PVE 相关补丁更新。</blockquote><br /><br />refs: <a href="https://forum.proxmox.com/threads/proxmox-ve-7-is-vulnerable-to-some-type-of-0day-rce-non-auth.186078/" target="_blank" rel="noopener" title="PVE7 report">PVE7 report</a> | <a href="https://forum.proxmox.com/threads/proxmox-ve-7-is-vulnerable-to-some-type-of-0day-rce-non-auth.186078/#post-867820" target="_blank" rel="noopener" title="PVE 8.0.3/8.2/8.4 report">PVE 8.0.3/8.2/8.4 report</a><a class="tgme_widget_message_link_preview" href="https://forum.proxmox.com/threads/proxmox-ve-7-is-vulnerable-to-some-type-of-0day-rce-non-auth.186078" target="_blank" rel="noopener" title="Two days ago, my Proxmox VE 7 installation, which was over four years old with the latest updates available up to EOL and only one user (root), was encrypted, and a ransom was demanded for..."> <i class="link_preview_right_image" style="background-image:url('https://cdn4.telesco.pe/file/L0JMLAAIb2BP4a91nqnpW7iOa3Z6Ftm16QfEpApDdbZyavv51fVEc4tuGhflxBFOPKKVyPYz30xjp7rTqQW4oZ2L9tHPIMHVxqwa2JZX2LnVUzVaiuD-8TojL3_iu5AYF7HPW_IDSJkdfXvYY80yXG5LjDRVK_BnStxPVyCs5op6mmzWWyOXfI5AdQtTLUNEnv2B6RRTWkSgvY8tiParEXxhqRjctV2gK7lCOoRv_HdVpppho6FTuEFAdPvyzkSyp9-Phk52pqLRKvqSh7gu7n-XhH95uytNF21_xozgQ3UIWz3g3dr198Fr5wjE6M0WHQ5xxFFEvV3MPVtaSvutjw.jpg')"></i> <div class="link_preview_site_name accent_color">Proxmox Support Forum</div> <div class="link_preview_title">Proxmox VE 7 is vulnerable to some type of 0day/RCE non auth</div> <div class="link_preview_description">Two days ago, my Proxmox VE 7 installation, which was over four years old with the latest updates available up to EOL and only one user (root), was encrypted, and a ransom was demanded for...</div> </a>https://channel.0w0.best/posts/5532https://channel.0w0.best/posts/5532Sat, 14 Sep 2024 12:57:25 GMT<a href="https://fixupx.com/0xcf1/status/1834915727662288975" target="_blank" rel="noopener" title="https://fixupx.com/0xcf1/status/1834915727662288975">https://fixupx.com/0xcf1/status/1834915727662288975</a><br /><a href="https://t.me/illusory_world/5252" target="_blank" rel="noopener" title="https://t.me/illusory_world/5252">https://t.me/illusory_world/5252</a><a class="tgme_widget_message_link_preview" href="https://fixupx.com/0xcf1/status/1834915727662288975" target="_blank" rel="noopener" title="Sorry, that post doesn't exist :("> <div class="link_preview_site_name accent_color">Fixupx</div> <div class="link_preview_title">FxTwitter / FixupX</div> <div class="link_preview_description">Sorry, that post doesn't exist :(</div> </a>