Skip to content
Threat Feed
Subscribe

Product

Xen Orchestra (< 6.9.2, < 6.10.1)

1 brief RSS
critical threat

Vates Xen Orchestra Authentication Bypass and Zero-Day Exploitation

A threat actor is actively exploiting a critical authentication bypass in the Xen Orchestra REST API and a separate zero-day vulnerability to achieve root-level code execution on XCP-ng nodes.

Xen Orchestra +1
2t 1i