[ Vendor · 2 CVEs ]
vatesfr
CVEs affecting vatesfr published in the last 30 days, plus any vatesfr CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113610 | 20 Oct 2026 | CVSS 5.4 | vatesfr xen-orchestraXen Orchestra before 6.9.0 contains an authorization bypass vulnerability in the xo-server user.set API method that allows low-privileged… | |
| CVE-2026-110111 | 13 Oct 2026 | CVSS 7.5 | vatesfr xen-orchestraXen Orchestra before 6.9.0 contains an improper access control vulnerability that allows any authenticated user to become global administrator by… |