https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 22:27:35 +0000 https://vulnerability.circl.lu/vuln/cve-2026-23560 <p><strong>Affected:</strong> Xen XAPI</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:</p> <p>https://docs.xenserver.com/en-us/xencenter/current-release/rbac-overview.html#rbac-roles</p> <p>The pool-admin role is fully privileged. Notably, users with this role can also SSH into the host as root.</p> <p>The other administrator roles are pool-operator, vm-power-admin and vm-admin, each of which are authorised to configure and manage various aspects of the system.</p> <p>Some settings are inadequately restricted, and can be set by a lower privilege of administrator than expected.</p> <p>* CVE-2026-23559: A vm-admin can set VBD.other_config:backend-local and turn arbitrary files in dom0 into VDIs (virtual disks) and give said disks to a VM they control. This is an arbitrary read and/or modify of files in dom0.</p> <p>* CVE-2026-23560: A vm-admin can set VM.other-config:is_system_domain and mark a VM as a system domain. System domains are ignored and left running during certain other host/pool operations, and may be hidden from view in tooling.</p> <p>* CVE-2026-23561: A vm-admin can set VM.other_config:storage_driver_domain and mark a VM as the storage domain for a particular host storage connection (PBD). Shutting down the VM can cause the PBD to be erroneously marked as unplugged when it is not.</p> <p>* CVE-2026-23562: Configuration o…</p> <p><strong>Affected:</strong> Xen XAPI</p> <p>[This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different roles, using Role Based Access Control. For more details, see:</p> <p>https://docs.xenserver.com/en-us/xencenter/current-release/rbac-overview.html#rbac-roles</p> <p>The pool-admin role is fully privileged. Notably, users with this role can also SSH into the host as root.</p> <p>The other administrator roles are pool-operator, vm-power-admin and vm-admin, each of which are authorised to configure and manage various aspects of the system.</p> <p>Some settings are inadequately restricted, and can be set by a lower privilege of administrator than expected.</p> <p>* CVE-2026-23559: A vm-admin can set VBD.other_config:backend-local and turn arbitrary files in dom0 into VDIs (virtual disks) and give said disks to a VM they control. This is an arbitrary read and/or modify of files in dom0.</p> <p>* CVE-2026-23560: A vm-admin can set VM.other-config:is_system_domain and mark a VM as a system domain. System domains are ignored and left running during certain other host/pool operations, and may be hidden from view in tooling.</p> <p>* CVE-2026-23561: A vm-admin can set VM.other_config:storage_driver_domain and mark a VM as the storage domain for a particular host storage connection (PBD). Shutting down the VM can cause the PBD to be erroneously marked as unplugged when it is not.</p> <p>* CVE-2026-23562: Configuration o…</p> https://vulnerability.circl.lu/vuln/cve-2026-23560