Critical Xen Orchestra Flaws Exploited in Attacks

Vates warns that a threat actor is exploiting a critical-severity authentication bypass and a zero-day vulnerability in Xen Orchestra.