News
Critical Xen Orchestra Authentication Bypass Exploited
Researchers found a vulnerability in Xen Orchestra that allows remote attackers to use a crafted cookie to obtain login tokens, execute code on managed pools, and fully compromise virtualization clusters. Active exploitation is reported; administrators should upgrade and restrict internet access.