2026 | Vates VMS Documentation

📄️VSA-2026-056: ipv4 - free inet_opt and ireq_opt after an RCU grace period (CVE-2026-98432)

2026-11-03 / Critical severity / XCP-ng 8.3 and Xen Orchestra Appliance affected, an adversary can take over Dom0 through a use-after-free in the kernel IPv4 TCP connection handling.

📄️VSA-2026-055: arbitrary read/write via grant copy (CVE-2026-102703, CVE-2026-102704 / XSA-523)

2026-11-03 / Critical severity / XCP-ng 8.3 affected, a malicious guest can read and write arbitrary memory of other domains, including Dom0.

📄️VSA-2026-054: Multiple Node.js vulnerabilities

2026-10-29 / Important severity / Xen Orchestra and Xen Orchestra Appliance affected, multiple Node.js vulnerabilities.

📄️VSA-2026-053: Broken Access Control in XO5 Due to Missing Server-side Object Filtering

2026-10-29 / Moderate severity / Xen Orchestra and Xen Orchestra Appliance affected, An unprivileged user can bypass the intended restrictions and access information reserved to admin.

📄️VSA-2026-052: Unauthenticated ServerHello can downgrade later connections to classical key exchange

2026-10-29 / Low severity / Xen Orchestra and Xen Orchestra Appliance affected, an adversary could harvest now and decrypt after.

📄️VSA-2026-051: Multiple Sudo vulnerabilities

2026-11-03 / Low severity / XCP-ng 8.3 affected and Xen Orchestra Appliance

📄️VSA-2026-050: eMudhra Intermediate CA Compromise

2026-10-22 / Important severity / XCP-ng 8.3 affected, Xen Orchestra Appliance affected, eMudhra Intermediate CA Compromise.

📄️VSA-2026-049: Out-of-bounds access in tapdisk (CVE-2026-102701 / XSA-521)

2026-10-13 / Critical severity / XCP-ng 8.3 affected, a malicious guest can obtain code execution in the tapdisk process in dom0.

📄️VSA-2026-048: gnttab cache-flush handling may cause a page reference leak (CVE-2026-102700 / XSA-520)

2026-10-13 / Important severity / XCP-ng 8.3 affected, a guest can cause a Denial of Service of Domain 0 and the host.

📄️VSA-2026-047: VMX VMentry failure with branch tracing and blocked states (CVE-2026-79611 / XSA-518)

2026-10-13 / Moderate severity / XCP-ng 8.3 affected, HVM/PVH guest userspace can crash the guest on Intel hardware.

📄️VSA-2026-046: grant-table double version change race (CVE-2026-79610 / XSA-517)

2026-10-13 / Important severity / XCP-ng 8.3 affected, an unprivileged guest may elevate privileges to the host.

📄️VSA-2026-045: Ineffectual Zenbleed workaround (CVE-2026-79608 / XSA-515)

2026-10-13 / Important severity / XCP-ng 8.3 affected, an attacker can read data from different contexts on the same core.

📄️VSA-2026-044: Privilege Escalation to Global Administrator via Prototype Pollution through Attacker-Controlled VMware VMX in vm.importFromEsxi

2026-09-30 / Important severity / Xen Orchestra and Xen Orchestra Appliance affected.

📄️VSA-2026-025: buffer overruns in libfsimage iso9660 handling (CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425 / XSA-497)

2026-07-28 / Moderate severity / XCP-ng 8.3 affected.

📄️VSA-2026-024: Multiple Xen XSAs assessed as not impacting Vates products

2026-07-28 / Not applicable / Multiple XSAs assessed as not impacting Vates products.

📄️VSA-2026-023: XAPI Missing TLS verification in some SDKs (CVE-2026-42491 / XSA-498)

2026-07-15 / Not applicable / SDK not directly used by XCP-ng.

📄️VSA-2026-022: LLDPD vulnerability in VLAN decapsulation

2026-06-23 / Low severity / XCP-ng 8.3 affected.

📄️VSA-2026-021: Linux Kernel CIFS Client Local Privilege Escalation (CVE-2026-46243)

2026-06-10 / Moderate severity / XCP-ng and XOA affected.

📄️VSA-2026-020: x86 mismatched mapcache metadata (XSA-494)

2026-06-10 / Not applicable / Only affects PV guests.

📄️VSA-2026-019: Arm TLBI completion issue (XSA-493)

2026-06-10 / Not applicable / Arm-only vulnerability.

📄️VSA-2026-018: domctl lock open to abuse (XSA-492)

2026-06-10 / Low severity / XCP-ng 8.3 affected.

📄️VSA-2026-017: x86 HVM I/O port list traversal (XSA-491)

2026-06-10 / Low severity / XCP-ng 8.3 affected.

📄️VSA-2026-016: Linux Kernel ptrace and RDS Local Privilege Escalation (CVE-2026-46333, CVE-2026-43494)

2026-06-02 / Moderate severity / XCP-ng and XOA affected.

📄️VSA-2026-015: x86 CPU Opcode Cache corruption (XSA-490)

2026-05-21 / Critical severity / XCP-ng 8.3 affected

📄️VSA-2026-014: Linux Kernel XFRM/RXRPC Local Privilege Escalation (CVE-2026-43284, CVE-2026-43500, CVE-2026-46300)

2026-05-15 / Moderate severity / XCP-ng and XOA affected.

📄️VSA-2026-013: Copy Fail - Linux Kernel Privilege Escalation (CVE-2026-31431)

2026-05-04 / Moderate severity / XCP-ng and XOA affected.

📄️VSA-2026-012: Vulnerability in XCP-ng Windows Guest Tools

2026-05-05 / Low severity / XCP-ng Windows Guest Tools affected.

📄️VSA-2026-011: Multiple XAPI potential Vulnerabilities

2026-04-28 / Low severity / 8.3 affected.

📄️VSA-2026-010: Floating Point Divider State Sampling on AMD CPUs

2026-04-28 / Moderate severity / XCP-ng 8.3 affected.

📄️VSA-2026-009: OpenSSH ECDSA & CA vulnerabilities

2026-04-28 / Moderate severity / XCP-ng 8.3 affected.

📄️VSA-2026-008: XSA-486

2026-04-28 / Critical severity / XCP-ng 8.3 affected.

📄️VSA-2026-007: XSA-483

2026-04-28 / Critical severity / XCP-ng 8.3 affected.

📄️VSA-2026-006: Issue with scrubbing of physmap allocated pages

2026-03-24 / Important severity / XCP-ng 8.3 affected.

📄️VSA-2026-005: XSA-480

2026-03-17 / Critical severity / XCP-ng 8.3 affected.

📄️VSA-2026-004: Node-Tar

2026-01-29 / Low severity / XO is affected.

📄️VSA-2026-003: XSA-479

2026-01-27 / Important severity / XCP-ng 8.3 affected.

📄️VSA-2026-002: XSA-478

2026-01-27 / Critical severity / XCP-ng 8.3 affected.

📄️VSA-2026-001: XSA-477

2026-01-27 / Low severity / XCP-ng 8.3 affected.