Vulnerability in Xen XAPI (July 15, 2026)
A vulnerability has been discovered in Xen XAPI. It allows an attacker to cause a security policy bypass.
CSIRTS triage
- What
- A vulnerability allows for a security policy bypass.
- Who is affected
- Users of Xen XAPI.
- Urgency
- Remediation is important to maintain security policies.
- Action
- Users should apply updates to Xen XAPI.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Xen XAPI
Get an email when a new Xen XAPI advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0884/
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-42491 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- medium[NEW] [medium] Xen: Vulnerability allows file manipulationcert-bund
- unknownMultiple Vulnerabilities in Citrix Products (July 15, 2026)cert-fr-avis
More from CERT-FR Avis de sécurité
- unknownMultiples vulnérabilités dans le noyau Linux d'Ubuntu (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux de Red Hat (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans Progress MOVEit Transfer (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans PHP (31 juillet 2026)2026-07-31
- unknownMultiples vulnérabilités dans le noyau Linux de SUSE (31 juillet 2026)2026-07-31