News
Xen Orchestra VSA-2026-062: critical login bypass exploited, update to 6.9.1 or 6.10.0
Vates says an empty-object login cookie lets attackers sign in to Xen Orchestra without credentials and is being exploited; fixed in 6.9.1 and 6.10.0.
audiotale.net team7 min read