CyberReportedHighDevelopingFeatured

Critical Xen Orchestra auth bypass exploited to hijack VM servers

A critical authentication bypass in Xen Orchestra is under active exploitation, enabling attackers to gain admin privileges and take over XCP-ng virtualization hosts. The flaw undermines trust in virtualized infrastructure management, potentially allowing lateral movement and data compromise. Details on patch availability and attack scope remain limited.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works

BleepingComputer3 days agoengCredibility 24%View source

Score Breakdown

Mosaic Score7.1

Model confidence0.7

Significance0.8

Source credibility0.2

Intelligence Tags

#authentication-bypass #xen-orchestra #xcp-ng #virtualization #exploit #cve

Source

Part of a situation

developingCyber1d ago

Xen Orchestra Authentication Bypass Actively Exploited for XCP-ng Takeover

Attackers are actively exploiting critical authentication bypass vulnerabilities in Xen Orchestra, enabling arbitrary code execution as admin and full takeover of XCP-ng virtualization hosts. This exploitation is confirmed, though the scale, specific targeting, and full attack scope remain unclear. The vulnerabilities undermine virtualized infrastructure management trust.

↑ escalating·↑2 signalsScore 5.0