authentication bypass – Security Blog https://blog.siteguarding.com Wed, 11 Nov 2026 09:10:58 +0000 en-US hourly 1 https://wordpress.org/?v=6.8.3 https://blog.siteguarding.com/wp-content/uploads/2016/07/cropped-Logo_sh_last_2_last-32x32.jpg authentication bypass – Security Blog https://blog.siteguarding.com 32 32 Xen Orchestra Hosting Risk: What to Ask Your Host https://www.siteguarding.com/security-blog/xen-orchestra-hosting-console-risk/ Wed, 11 Nov 2026 09:10:58 +0000 https://www.siteguarding.com/security-blog/xen-orchestra-hosting-console-risk/ On 10 November 2026, Vates VMS warned that Xen Orchestra, the web console for XCP-ng and Xen, is under active attack via VSA-2026-062, an authentication bypass with no CVE in that reporting. The Xen Orchestra hosting risk is one public management page that can put every guest on that pool within an attacker's reach. Key takeaways Xen Orchestra is the web console French vendor Vates VMS ships for...

Source

]]>