News
ai Gilbert + Tobin rethinks the business of law with AI - OpenAI - ChatGPT & AI Research cybersecurity Hackers Exploit Critical Xen Orchestra Authentication Bypass to Take Over Virtualization Hosts - CyberPress cybersecurity NCSC scheme will help critical organisations test their cyber defences - NCSC UK threat-intel Researchers Uncover 45 AI Hacking Frameworks, With Hundreds of Attack Consoles Exposed on the Internet - GBHackers cybersecurity Windows Active Directory Security Flaws Allow Attackers to Execute Code and Crash Services - CyberPress cybersecurity Microsoft fixes audio issues caused by September security updates - BleepingComputer cybersecurity Over 1,400 ARTEX AI Hacking Services Found Exposed on the Internet, Researchers Warn - CyberPress vulnerability USN-9043-1: Linux kernel (NVIDIA) vulnerabilities - Ubuntu Security Notices vulnerability USN-9045-1: Linux kernel (NVIDIA) vulnerability - Ubuntu Security Notices vulnerability USN-9044-1: Linux kernel (NVIDIA BaseOS) vulnerabilities - Ubuntu Security Notices cybersecurity ICS Patch Tuesday: Siemens Flags High-Severity Flaws, Node2Shell Exposure - SecurityWeek cybersecurity CISA flags Cisco BroadWorks flaw as actively exploited in attacks - BleepingComputer cybersecurity Critical FortiClient Flaw Lets Hackers Execute Code When Users Visit Malicious Websites - CyberPress threat-intel Ivanti Patches Critical SQL Injection Flaw Allowing Remote Code Execution Without Login - GBHackers cybersecurity New GhostFrame Malware Lets Hackers Hijack VMware ESXi Virtual Machines and Steal Windows Credentials - CyberPress
1 / 15
All news ›
Cybersecurity

Hackers Exploit Critical Xen Orchestra Authentication Bypass to Take Over Virtualization Hosts

CyberPress ·

Threat actors are actively exploiting a critical authentication bypass in Xen Orchestra, the management plane for XCP-ng pools, to gain administrator control and then root on hypervisor nodes. Vates tracks the flaw as VSA-2026-062 (“Empty-object login token”), published November 10, 2026. It affects Xen Orchestra and the Xen Orchestra Appliance, specifically builds before 6.9.2 (stable) […] The post Hackers Exploit Critical Xen Orchestra Authentication Bypass to Take Over Virtualization Hosts appeared first on Cyber Security News .

Continue on CyberPress ↗ ‹ All news Get the newsletter

The summary and image come from CyberPress; the image is shown from their website.