Security News Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers BleepingComputer Daniel Bender 10 Nov 2026 Share A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow takeover of XCP-ng virtualization hosts.
