Skip to content
OpenAdvisories

Vendor

vatesfr

2 known vulnerabilities.

Products

xen-orchestra 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-113610

    Xen Orchestra before 6.9.0 Authorization Bypass via user.set API

    Xen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allows low-privileged authenticated users to modify other users' preferences by supplying an arbitrary target user id. Attackers can delete the…

    vatesfr xen-orchestra Virtualization