Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access
Source: The Hacker News ·
French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass flaw, which does not yet have a CVE identifier, is tracked as VSA-2026-062. "REST cookie parsing turns authenticationToken=j:%7B%7D into {}," Vates VMS said in an alert. "REST authentication passes that object to the
Frequently Asked Questions
What is Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access?
Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access is a article discovery curated from The Hacker News. French software company Vates VMS has warned of a critical security vulnerability in Xen Orchestra that it said is being actively exploited in the wild. The authentication bypass…
How can I access or experience this?
You can experience this content directly on its original host (The Hacker News) by clicking the "Open Original" button.
Where does this content come from?
Curated from The Hacker News by the OnSuggest team to surface the most interesting and serendipitous content on the web.
More like this
All Technology discoveries →GITEX GLOBAL 2026 moves to Expo City Dubai with new dates and a summit
GITEX GLOBAL 2026 returns to Dubai this December with new dates, a new venue and a new format. A one-day summit opens the event on 7 December at Dubai World Trade Centre. A four-day expo follows from 8 to 11 December at Dubai Exhibition Centre in Expo City Dubai. The organisers have named Huawei, Microsoft, […] This story continues at The Next Web
SoftBank leads $500M round valuing Agile Robots at $8.5B
Agile Robots has raised $500 million in a funding round led by SoftBank, valuing the Munich-based robotics company at $8.5 billion. The company announced the investment in a statement Bloomberg reported, bringing total funding to around $2 billion. Nvidia, Hitachi, and T.Capital also participated in the round. The investment comes five months after reports emerged […] This story continues at The Next Web
Lithuania’s Biomatter raises $18M for AI enzyme design
Vilnius-based Biomatter has raised $18M in a Series A round to scale its AI enzyme design platform. Astanor led the oversubscribed round. Existing investors UVC Partners, Inventure and Metaplanet also took part. The company announced the round in a press release distributed by Business Wire on 12 November. It did not disclose a valuation. TNW […] This story continues at The Next Web
Munich’s SE3 raises $30M to give Europe’s drones spatial intelligence
SE3, the Munich startup building spatial intelligence software for autonomous systems, has raised a $30M Series A led by Accel, with Keen, Lakestar, and Seedcamp participating. The round comes just five months after the company emerged from stealth with a €5.5M seed. SE3’s pitch starts from a gap: AI can automate swathes of knowledge work, […] This story continues at The Next Web
Griffin raises $20M to add cards and stablecoins to its banking platform
Griffin, the UK bank that lets fintechs and platforms embed accounts and payments into their own products, has raised a $20M Series B led by Octagon Partners. The round values the London-based company at over $100M and will fund its expansion into card issuing and stablecoin services. Notion Capital, A+ Ventures, Nordic Ninja, Breega, and […] This story continues at The Next Web
Adobe’s MAX Sneaks trade the prompt for brushes, drags and gestures
Adobe has shown 10 research projects at its MAX Sneaks session in Miami Beach. Most of them let creators edit with a brush, a drag or a gesture instead of a typed prompt. Anyone can already try two of them in a new Adobe Labs Playground. Actor Terry Crews hosted the session on Wednesday evening. […] This story continues at The Next Web