Home/News

Security & Lifecycle News

Aggregated from vendor advisories, security research, and industry publications.

Show: Network-relevant Vendor advisories CVE Government Industry Blog All Vendor: XCP-ng (clear)

  1. · SecurityWeek

    Critical Xen Orchestra Flaws Exploited in Attacks

    A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes. The post Critical Xen Orchestra Flaws Exploited in Attacks appeared first on SecurityWeek.

    Vendors: XCP-ng, Xen Project

  2. · BleepingComputer

    Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

    A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts. [...]

    Vendors: XCP-ng, Xen Project

↑ Top