Vates VMS has issued a warning regarding a critical authentication bypass vulnerability in Xen Orchestra that is currently being exploited in the wild to gain administrator access. The issue stems from improper REST cookie parsing, allowing attackers to bypass security checks. Tracked as VSA-2026-062 without a CVE yet, administrators must apply available patches immediately to prevent system compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →