Discussion

Xen Orchestra Authentication Bypass: Empty Cookie to Root

Xen Orchestra authentication bypass VSA-2026-062: how an empty cookie gave attackers admin and a VM import gave root on XCP-ng hosts, with IOCs and checks.

2d ago11 min read404-founders.comRead the article

#cybersecurity
#security
#virtualization
#vulnerability

Written by

404 Founders

@404-founders · Bosnia and Herzegovina, Estonia

View profile

Error-proof Cyber Solutions

Securing the digital frontier. Error-proof cyber solutions.

Responses

Markdown supported · ⌘↵ to post

No responses yet.

Search Hashnode

Xen Orchestra Authentication Bypass: Empty Cookie to Root

Written by

Responses