Threat Pulse 62High
Critical Xen Orchestra auth bypass exploited to hijack VM servers
Severity 6ActiveconfirmedCloud and SaaS

Critical Xen Orchestra auth bypass exploited to hijack VM servers

What to do: Nov 12: SecurityWeek: critical Xen Orchestra flaws exploited in attacks.

· 4 days ago · bleepingcomputer.com
Sourcesbleepingcomputer.comThe Hacker NewsSecurityWeek
On X
@BleepinComputerverifiedNov 10, 16:17 UTC

Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers

Open on X
@TheHackersNewsverifiedNov 10, 18:13 UTC

‼️ ALERT - Hackers are actively exploiting a critical authentication bypass in Xen Orchestra. A crafted cookie can grant Admin access and enable root-level takeover of XCP-ng hosts. Patches are available. Here's what admins need to know:

Open on X
@DarkWebInformerverifiedNov 10, 20:20 UTC

🚨 Hackers actively exploiting critical Xen Orchestra flaw to hijack virtualization servers without authentication Vates has confirmed active exploitation of a critical authentication bypass vulnerability in Xen Orchestra, allowing attackers to gain administra

Open on X
@SecurityWeekverifiedNov 12, 04:44 UTC

Critical Xen Orchestra Flaws Exploited in Attacks

Open on X
Why this score

Plan rubric with caps (verified sweep, Nov 11)

Back to the board

Updated Nov 14, 03:49 UTC. Refreshes on its own.

Add a threat

Paste a link to an advisory, an article or an X post. A person reads every submission before it shows; nothing posts on its own.

Share

The picture people see when the link is posted
Post on XSave picture

This picture is what X, iMessage, Slack and Facebook show under the link. It is drawn fresh from the live board: the board and chart pictures update every 10 minutes, an event picture follows that event.