Stay Informed

Cybersecurity News

Home / News

Our Analyses

What it means for your servers

The security stories that matter, explained by our team — with the concrete steps to take.

Xen Orchestra — VSA-2026-062

Vulnerability Critical

Xen Orchestra: an exploited authentication bypass gives attackers admin rights over XCP-ng virtualisation

Vates has fixed a critical flaw in Xen Orchestra, the web console used to manage XCP-ng hosts, and says it is already being exploited. A crafted cookie lets an attacker log in as …

Xen OrchestraXCP-ngVirtualization

Source Watch

Latest headlines from security outlets

Collected every two hours from specialised publications — each link leads to the original article.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 43 Xen Critical Buffer Overrun Vuln XSA-477 CVE-2025-58150

x86: buffer overrun with shadow paging + tracing [XSA-477, CVE-2025-58150] x86: incomplete IBPB for vCPU isolation [XSA-479, CVE-2026-23553]

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 15.3 Xen Moderate Security Update 2026-0303-1

An update that solves six vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 15.5 Xen Moderate Issues CVE-2025-58150 2026-0304-1

An update that solves two vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

openSUSE 15.5 SUSE-SU-2026-0456-2 Urgent Xen Memory Leak Flaw Update

An update that solves two vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: Xen Important Memory Access Issues Vuln 2026:0012-1

An update that solves six vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

SUSE: Critical Update for Xen Addressing Information Leak Issue 2026:0012-1

An update that solves six vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Moderate Security Update for Xen CVE-2025-58149 Released Today

An update that solves one vulnerability, contains one feature and has one security fix can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed: xen Moderate Security Issue CVE-2025-58149 Advisory

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: Moderate Permissions and Input Sanitization Flaws in Xen

Incorrect removal of permissions on PCI device unplug [XSA-476, CVE-2025-58149] x86: Incorrect input sanitisation in Viridian hypercalls [XSA-475, CVE-2025-581…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE: Xen Important Input Sanitisation Issues Advisory 2025:3843-1

An update that solves five vulnerabilities can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Xen Important Fixes for Input Sanitization Issues 2025:3843-1

* bsc#1248807 * bsc#1251271 Cross-References: * CVE-2025-27466

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed: Xen Moderate Security Fix CVE-2025-58147 2025:15673-1

An update that solves one vulnerability can now be installed.

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 42: xen 2025-7a1f93f58a

Mutiple vulnerabilities in the Viridian interface [XSA-472, CVE-2025-27466, CVE-2025-58142, CVE-2025-58143] Arm issues with page refcounting [XSA-473, CVE-2025…

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Xen Important Security Update for CVE-2025-27465 Advisory

* bsc#1244644 * bsc#1246112 Cross-References: * CVE-2025-27465

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE Linux: Xen Important Security Update 2025:02325-1 CVE-2024-36350 DoS

* bsc#1238896 * bsc#1244644 * bsc#1246112 Cross-References:

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Leap 15.5: Advisory 2025:02325-1: Xen Important Security Patch

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: Important Security Advisories for Xen CVE-2024-28956, CVE-2024-36350

* bsc#1027519 * bsc#1234282 * bsc#1238043 * bsc#1238896 * bsc#1243117

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:02315-1 Important Security Update for Xen DoS Vulnerability

* bsc#1027519 * bsc#1238896 * bsc#1244644 * bsc#1246112 * jsc#PED-8907

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

openSUSE Tumbleweed: 2025:15342-1 moderate: CVE-2025-27465 in xen update

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

SUSE: 2025:02290-1 moderate: xen security fix for indirect target selection

* bsc#1238043 * bsc#1243117 Cross-References: * CVE-2024-28956

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: xen 2025-86f39c57ce

x86: Indirect Target Selection [XSA-469, CVE-2024-28956]

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 41: xen 2025-20f63c4273 Security Advisory Updates

deadlock potential with VT-d and legacy PCI device pass-through [XSA-467, CVE-2025-1713]

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Breaches & leaks

Fedora 40: xen 2024-7c2cfa2fe5 Security Advisory Updates

Deadlock in x86 HVM standard VGA handling [XSA-463, CVE-2024-45818] libxl leaks data to PVH guests via ACPI tables [XSA-464, CVE-2024-45819]

LinuxSecurity - Security Advisories

LinuxSecurity - Security Advisories Vulnerabilities

Fedora 40: xen 2024-051cf1553e Security Advisory Updates

x86: Deadlock in vlapic_error() [XSA-462, CVE-2024-45817]