cybercrime.clubhttps://cybercrime.club/tags/xen/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usWed, 11 Nov 2026 11:09:14 -0400Xen Orchestra VSA-2026-062: Empty-Object Cookie Auth Bypass Exploited to Take Over XCP-ng Poolshttps://cybercrime.club/posts/xen-orchestra-vsa-2026-062-empty-object-cookie-auth-bypass-exploited/Wed, 11 Nov 2026 11:09:14 -0400https://cybercrime.club/posts/xen-orchestra-vsa-2026-062-empty-object-cookie-auth-bypass-exploited/Vates warns that a critical Xen Orchestra auth bypass, triggered by a single crafted cookie, is being exploited to gain admin access and root on managed XCP-ng hosts.vulnerabilities