Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

November 10, 2026 · 4:17 pm 1 sources

Image: BleepingComputer

Coverage

Coverage

• Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
  BleepingComputer · November 10, 2026 16:17
  A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [...]