XCP_ng_CVE-2026-31431_tester

CVE-2026-31431 "Copy Fail" — XCP-ng Laboratory Detector A safe, non-destructive detector script for CVE-2026-31431 "Copy Fail", validated against XCP-ng 8.3 LTS prior to the May 5, 2026 security update. ⚠️ Authorized use only. Run this script exclusively on systems you own or are explicitly...

XCP_ng_CVE-2026-43284_tester

XCP-ng Dirty Frag Diagnostic — CVE-2026-43284 A community diagnostic tool to determine whether an XCP-ng dom0 host is exposed to CVE-2026-43284 "Dirty Frag", a local privilege escalation vulnerability in the Linux kernel's xfrm-ESP subsystem. TL;DR — All current XCP-ng releases 8.1, 8.2, 8.3...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-53437 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-53435 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-53436 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-53442 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-53439 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-53440 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

XCP-ng Supervisor RBAC Access Bypass

The vulnerability of the setotherconfig function in the RBAC access control subsystem of the XCP-ng supervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

XCP-ng RBAC Privilege Escalation

The vulnerability of function systemdomains.ml:30-35 in the RBAC access control subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to elevate their privileges...

XCP-ng RBAC Storage Driver Privilege Escalation

The vulnerability of the storagedriverdomain driver in the Role-Based Access Control RBAC subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to elevate their...

XCP-ng RBAC HVM Serial Write Access

The vulnerability of the hvmserial component in the Role-Based Access Control RBAC access management subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor,...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

CVE-2026-31431 "Copy Fail" — XCP-ng Laboratory Detector A saf...

PT-2026-42284

Уязвимость функции map keys roles подсистемы ролевого управления доступом RBAC гипервизора XCP-ng и платформы для серверной виртуализации XenServer связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, обойти существующие механизмы безопасно...

PT-2026-42283

Уязвимость драйвера storage driver domain подсистемы ролевого управления доступом RBAC гипервизора XCP-ng и платформы для серверной виртуализации XenServer связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, повысить свои...

PT-2026-42285

Уязвимость компонента hvm serial подсистемы ролевого управления доступом RBAC гипервизора XCP-ng и платформы для серверной виртуализации XenServer связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, получить доступ на запись...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-33001 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...

MINI-2XCP-8V35-QHRP

Bulletin has no description...

com.viltgroup.xcp.jenkins:xcp-ci (>=0.4.0, <=0.5.5), org.jenkins-ci.main:jenkins-test-harness (1.617) +2 more potentially affected by CVE-2026-27100 via org.jenkins-ci.main:jenkins-core (1.617)

org.jenkins-ci.main:jenkins-core MAVEN version 1.617 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.viltgroup.xcp.jenkins:xcp-ci =0.4.0, =0.5.5 - org.jenkins-ci.main:jenkins-test-harness 1.61...