Critical Xen Orchestra Authentication Bypass Exploited in the Wild to Seize Admin Access
RedSide Security November 11, 2026 Vulnerability 33 views
Vates VMS warns that a critical authentication bypass in Xen Orchestra, tracked as VSA-2026-062 and still without a CVE, is being actively exploited to gain admin access to virtualization management planes.
patch management
authentication bypass
active exploitation
virtualization security
Xen Orchestra
Vates VMS
VSA-2026-062
Continue reading: Critical Xen Orchestra Authentication Bypass Explo…
