Tag: rest cookie parsing

1 article

Rows of rack-mounted servers in a brightly-lit server room with a single unoccupied workstation in the foreground.

Hackers Exploit Xen Orchestra Auth Flaw to Gain Admin Access

Hackers are actively exploiting a critical vulnerability in Xen Orchestra, allowing them to bypass authentication and gain admin access with just a malformed cookie. This alarming flaw, tracked as VSA-2026-062, has left systems open to attack, with no CVE identifier or patch available yet.

Analyst 207