A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.

Excerpt from BleepingComputer

GETSECURE.ai hasn't published its own summary of this story yet. The complete report is at BleepingComputer:

Read the full story at BleepingComputer →