Tag: xcp ng

Xen Orchestra Vulnerability Exploited to Hijack Virtual Machine Servers

A critical vulnerability in Xen Orchestra can be exploited to hijack virtual machine servers, allowing attackers to bypass authentication and gain Admin-level access to wreak havoc on managed pools and XCP-ng nodes. By sending a specially crafted cookie, hackers can gain unauthorized control and execute arbitrary code with ease.