Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

Jak se o tom psalo 3

1. 12. 11. 2026 16:15 · CSIRT Itálie (ACN) IT

   Vates: rilevato sfruttamento in rete di vulnerabilità in Xen Orchestra

   Vates ha rilevato lo sfruttamento in rete di vulnerabilità che interessano Xen Orchestra e Xen Orchestra Appliance, soluzioni per la gestione centralizzata di infrastrutture di virtualizzazione basate su XCP-ng e Xen. Tali vulnerabilità potrebbero consentire a un attaccante remoto non autenticato di eludere i meccanismi di autenticazione e sicurezza, acquisire privilegi amministrativi ed eseguire codice arbitrario sui sistemi interessati.

2. 11. 11. 2026 · zachyceno 04:00 · NCSC-FI FI

   VSA-2026-062: Empty-object login token

   Classification: Critical, Solution: Official Fix, Exploit Maturity: High, CVSSv3.1: None, CVEs: , Summary: A vulnerability was discovered in Xen Orchestra that is part of the Xen Orchestra Appliance. We classify the impact as Critical. For details on how we assign severity levels, see our Severity Levels Explained page. This vulnerability is actively exploited by a threat actor operating intially from 91.211.251.112:8001 and ustar3rqxgnskzgnwkgpofgtvxevm6cx3lxdbwt4mndtveqyaohid.onion:3333 (via…

3. 10. 11. 2026 17:17 · BleepingComputer US nadpis události

   Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

   A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [...]