Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access

0 Antworten 20 Aufrufe
Bewertende
Teilnehmer
Themenersteller #1
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild.

The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062.

"REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert. "REST authentication passes that object to the

Okumaya devam et...

Sie müssen angemeldet sein, um zu antworten.

0 Zitate ausgewählt