--- title: "#virtualization articles | Hashnode" description: "Explore 446 articles tagged #virtualization on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/virtualization" --- Tag # #virtualization 446 posts · 48 followers [404 Founders](https://hashnode.com/@404-founders) · [2d ago](https://hashnode.com/posts/xen-orchestra-auth-bypass-vsa-2026-062/6af5a1667df28551d2b3b7d3) ### [Xen Orchestra Authentication Bypass: Empty Cookie to Root](https://404-founders.com/blog/xen-orchestra-auth-bypass-vsa-2026-062?utm_source=hashnode&utm_medium=feed) Xen Orchestra authentication bypass VSA-2026-062: how an empty cookie gave attackers admin and a VM import gave root on XCP-ng hosts, with IOCs and checks. 11 min read · [404-founders.com](https://404-founders.com/blog/xen-orchestra-auth-bypass-vsa-2026-062?utm_source=hashnode&utm_medium=feed) [Daanial Farrukh](https://hashnode.com/@daanial) · [2d ago](https://hashnode.com/posts/docker-on-a-windows-vm-without-nested-virtualization-process-isolation-two-traps-and-the-image-that-was-linux-all-along/6af4ad1996c04bb2a0cdefb1) ### [Docker on a Windows VM Without Nested Virtualization — Process Isolation, Two Traps, and the Image That Was Linux All Along](https://quabin.hashnode.dev/docker-on-a-windows-vm-without-nested-virtualization-process-isolation-two-traps-and-the-image-that-was-linux-all-along?utm_source=hashnode&utm_medium=feed) No nested virtualization means no Docker Desktop. How Windows containers run in process isolation, two traps that break them, and the image check. 10 min read · [quabin.hashnode.dev](https://quabin.hashnode.dev/docker-on-a-windows-vm-without-nested-virtualization-process-isolation-two-traps-and-the-image-that-was-linux-all-along?utm_source=hashnode&utm_medium=feed) [bian Chloe](https://hashnode.com/@chloebian) · [3d ago](https://hashnode.com/posts/beyond-the-firecracker-escape-why-boxlite-s-network-architecture-matters/6af36e37785dd578d13efea6) ### [Beyond the Firecracker Escape: Why BoxLite’s Network Architecture Matters](https://blog.boxlite.ai/beyond-the-firecracker-escape-why-boxlite-s-network-architecture-matters?utm_source=hashnode&utm_medium=feed) A VM’s security boundary includes its network path. BoxLite’s default user-space networking makes a consequential difference. 4 min read · [blog.boxlite.ai](https://blog.boxlite.ai/beyond-the-firecracker-escape-why-boxlite-s-network-architecture-matters?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [6d ago](https://hashnode.com/posts/alert-xen-cve-2026-102703-grant-copy-guest-escape/6aef414f4892d1f1f3297e88) ### [Xen CVE-2026-102703: Guest Escape via Grant Copy](https://404-founders.com/blog/alert-xen-cve-2026-102703-grant-copy-guest-escape?utm_source=hashnode&utm_medium=feed) Xen XSA-523, CVE-2026-102703 and CVE-2026-102704: a guest reads and writes Dom0 memory. Xen 4.6 and later, no mitigation. Patch list inside. 12 min read · [404-founders.com](https://404-founders.com/blog/alert-xen-cve-2026-102703-grant-copy-guest-escape?utm_source=hashnode&utm_medium=feed) [Grace Olorunfemi](https://hashnode.com/@gracetemi) · [Nov 4](https://hashnode.com/posts/virtualbox/6aeb35e186ba896f5e064f3a) ### [VirtualBox](https://temitechhub.hashnode.dev/virtualbox?utm_source=hashnode&utm_medium=feed) Learn how to download and install VirtualBox on your machine. Discover why virtual machines are a flexible alternative to dual booting. 2 min read · [temitechhub.hashnode.dev](https://temitechhub.hashnode.dev/virtualbox?utm_source=hashnode&utm_medium=feed) [Cyber Knight](https://hashnode.com/@cyberknight2479) · [Oct 29](https://hashnode.com/posts/a-2-7-rated-flaw-let-attackers-work-without-leaving-a-trace/6ae326cc2dc24860a02252d1) ### [A 2.7-Rated Flaw Let Attackers Work Without Leaving a Trace](https://nulltrace.hashnode.dev/a-2-7-rated-flaw-let-attackers-work-without-leaving-a-trace?utm_source=hashnode&utm_medium=feed) It needed admin access first. That is exactly why it was useful — to the people who already had it. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/a-2-7-rated-flaw-let-attackers-work-without-leaving-a-trace?utm_source=hashnode&utm_medium=feed) [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [Oct 29](https://hashnode.com/posts/when-the-logs-lie-an-esxi-zero-day-with-a-cvss-of-2-7/6ae2c13cde04d86ff1cdde43) ### [When the Logs Lie: An ESXi Zero-Day With a CVSS of 2.7](https://securityland.hashnode.dev/when-the-logs-lie-an-esxi-zero-day-with-a-cvss-of-2-7?utm_source=hashnode&utm_medium=feed) Most of us sort vulnerabilities by CVSS score: critical first, then high, and the lows only if time allows. CVE-2026-41709 in VMware ESXi shows where that habit breaks. It scores just 2.7, yet on Octo 2 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/when-the-logs-lie-an-esxi-zero-day-with-a-cvss-of-2-7?utm_source=hashnode&utm_medium=feed) [Erik Rekola](https://hashnode.com/@erekola) · [Oct 26](https://hashnode.com/posts/keeping-my-lab-and-client-work-apart/6adfbb2b5af8f364a22801a5) ### [Keeping my lab and my client work apart](https://turva.dev/blog/keeping-my-lab-and-client-work-apart?utm_source=hashnode&utm_medium=feed) Client work now runs in a Windows virtual machine apart from my own lab. How I tested it with two test clients, and what it does not isolate. 12 min read · [turva.dev](https://turva.dev/blog/keeping-my-lab-and-client-work-apart?utm_source=hashnode&utm_medium=feed) [Onlive Server](https://hashnode.com/@onliveserver) · [Oct 23](https://hashnode.com/posts/running-nested-virtualization-labs-on-windows-hyper-v-server-2025-setup-and-performance-audit/6adaf5a6e956456802666c18) ### [Running Nested Virtualization Labs on Windows Hyper-V Server 2025: Setup and Performance Audit](https://onliveinfotech.hashnode.dev/running-nested-virtualization-labs-on-windows-hyper-v-server-2025-setup-and-performance-audit?utm_source=hashnode&utm_medium=feed) Learn to configure Hyper-V nested virtualization on Windows Server 2025 using PowerShell. Test Kubernetes, WSL2, networking, and VM performance. 6 min read · [onliveinfotech.hashnode.dev](https://onliveinfotech.hashnode.dev/running-nested-virtualization-labs-on-windows-hyper-v-server-2025-setup-and-performance-audit?utm_source=hashnode&utm_medium=feed) [Dorian Zheng](https://hashnode.com/@DorianZheng) · [Oct 22](https://hashnode.com/posts/building-a-vmm-from-scratch-0-5-booting-linux-in-190-lines-of-c/6ad9e56a0938f29b6048826c) ### [Building a VMM from scratch, #0.5: Booting Linux in 190 lines of C](https://blog.boxlite.ai/building-a-vmm-from-scratch-0-5-booting-linux-in-190-lines-of-c?utm_source=hashnode&utm_medium=feed) An interlude in the series: the whole path from an empty KVM VM to a Linux PID 1, in one C file you can read in one sitting. 11 min read · [blog.boxlite.ai](https://blog.boxlite.ai/building-a-vmm-from-scratch-0-5-booting-linux-in-190-lines-of-c?utm_source=hashnode&utm_medium=feed)