Neutron, our AI engine, scored 97.1% on UC Berkeley's CyberGym benchmark. Learn more

Tag

#VSA

1 articles

Deep Dive

Xen Orchestra Auth Bypass Exploited for Host Takeover (VSA-2026-062)

An empty JSON cookie object bypasses Xen Orchestra authentication and yields admin access; attackers are exploiting it, and 6.9.2 fixes it.

Ostorlab Team
Nov 11, 2026