Cpe:2.3:a:sukiwp:suki_sites_import:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3asukiwpsuki_sites_import/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 14 Aug 2026 14:08:00 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgProxmox Backup Server Information Disclosure and File Manipulation Vulnerabilityhttps://feed.craftedsignal.io/briefs/2026-08-proxmox-backup-server-vulnerability/Fri, 14 Aug 2026 14:08:00 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-proxmox-backup-server-vulnerability/Proxmox Backup Server contains a vulnerability (CVE-2024-8916) that allows a local attacker to manipulate files and disclose sensitive information due to improper access controls.Proxmox Backup Server versions prior to 3.2.7 are affected by a security vulnerability identified as CVE-2024-8916. This flaw arises from insufficient access controls within the backup server's architecture, allowing a local attacker with authenticated access to manipulate files and perform unauthorized information disclosure. The vulnerability impacts the integrity and confidentiality of the backup data stored on affected systems. Administrators are advised to update their Proxmox Backup Server installations to version 3.2.7 or later to mitigate this risk. This is a critical concern for environments relying on Proxmox for data protection, as the compromise of the backup infrastructure could lead to broader organizational exposure.

Impact

The successful exploitation of this vulnerability allows unauthorized users to modify or access sensitive backup data. Given the role of Proxmox Backup Server in centralizing organization-wide backups, this flaw poses a significant risk to data integrity and long-term recovery capabilities, potentially impacting any sector currently utilizing versions older than 3.2.7.

Recommendation

  • Update all Proxmox Backup Server instances to version 3.2.7 or higher immediately to address CVE-2024-8916.
  • Audit existing local user permissions and access rights on the host operating system to identify and limit accounts capable of interacting with the backup storage directories.
  • Monitor system logs for unauthorized access or modification attempts within the directories used by the Proxmox Backup Server daemon.
]]>lowadvisory