EN PT-BR
← Voltar ao feed
critical defense media

Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

1 fonte(s) · 1 atualização(ões) · publicado 10/11/2026 13:17 · coletado há 1 hora

A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.

Xen Orchestra is a web-based management platform developed by French software company Vates, used to manage XCP-ng virtualization environments, including virtual machines, hosts, and pools.

Linha do tempo

  1. bleepingcomputer.com ↗ · pub. 10/11/2026 13:17 · coletado 10/11 15:00 primeiro registro

    Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

    ler a análise desta fonte

    A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.

    Xen Orchestra is a web-based management platform developed by French software company Vates, used to manage XCP-ng virtualization environments, including virtual machines, hosts, and pools.