Xen Project: XAPI multiple role-based access control vulnerabilities
The Xen Project has released XSA-530 v2, which describes multiple issues regarding Role-Based Access Control (RBAC) in XAPI.
CVE search metadata
CVE search record: CVE-2026-102706. KEV: no. Brief: Xen Project: XAPI multiple role-based access control vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-xapi-rbac-vulnerabilities/
CVE search record: CVE-2026-102707. KEV: no. Brief: Xen Project: XAPI multiple role-based access control vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-xapi-rbac-vulnerabilities/
CVE search record: CVE-2026-102708. KEV: no. Brief: Xen Project: XAPI multiple role-based access control vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-xapi-rbac-vulnerabilities/
CVE search record: CVE-2026-119779. KEV: no. Brief: Xen Project: XAPI multiple role-based access control vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-xapi-rbac-vulnerabilities/
CVE search record: CVE-2026-119780. KEV: no. Brief: Xen Project: XAPI multiple role-based access control vulnerabilities. Brief link: https://feed.craftedsignal.io/briefs/2026-11-xapi-rbac-vulnerabilities/
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- Medium
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 11, 01:38 UTC
- Vulnerabilities
- 5 CVEs
- Source quality
- D3Roughly even chance
The Xen Project has released XSA-530 v2, addressing multiple RBAC issues in the XAPI toolstack. XAPI allows users to be configured with different roles using Role-Based Access Control.