Tag XCP-ng

Cybersecurity

Vates Warns of Actively Exploited Critical Xen Orchestra Flaw

The VSA-2026-062 flaw in Xen Orchestra and Xen Orchestra Appliance allows authentication bypass. Vates has released fixes and recommends immediate updates and keeping the interface off the public internet.

XNews
11/11/2026

Cybersecurity

Xen Fixes Critical XSA-523 Vulnerabilities Threatening Dom0 Memory

The XSA-523 security advisory addresses two flaws in Xen’s grant copy implementation. According to Xen Project, a malicious guest VM may read and write memory belonging to other domains, including Dom0.

XNews
04/11/2026