Threat Actors Exploit Xen Orchestra Flaws

Vates warns that threat actors are exploiting critical flaws in Xen Orchestra to bypass authentication and gain administrator privileges. The defects impact releases before 6.9.2 and 6.10.1, allowing unauthenticated attackers to execute arbitrary code. Initial exploitation occurred from 91.211.251.112:8001 via the Tor network, with no CVE identifier assigned yet.