news
The Hacker News
November 10th, 2026 at 6:12 PMHackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. "REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert. "REST authentication passes that object to the
#ai
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.50
Engagement proxy: 0
Canonical link: https://thehackernews.com/2026/11/hackers-exploit-critical-xen-orchestra.html