Multiple RBAC issues in XAPI

🗓️ 28 Apr 2026 18:05:00Reported by Xen ProjectType

xen

xen🔗 xenbits.xen.org👁 17 Views

RBAC flaws let VM administrator escalate to pool administrator and modify dom0 settings.

Reporter	Title	Published	Views	Family All 52
ATTACKERKB	CVE-2026-23560	9 Jul 202615:12	–	attackerkb
ATTACKERKB	CVE-2026-23561	9 Jul 202615:13	–	attackerkb
ATTACKERKB	CVE-2026-23559	9 Jul 202615:09	–	attackerkb
ATTACKERKB	CVE-2026-42486	9 Jul 202615:16	–	attackerkb
ATTACKERKB	CVE-2026-23562	9 Jul 202615:15	–	attackerkb
BDU FSTEC	The vulnerability of the setother_config() function in the RBAC access control subsystem of the XCP-ng supervisor and the XenServer server virtualization platform allows a malicious individual to gain unauthorized access to the file system.	20 May 202600:00	–	bdu_fstec
BDU FSTEC	Vulnerability of function system_domains.ml:30-35() in the RBAC access role management subsystem of the XCP-ng hypervisor and XenServer server virtualization platform, which allows a perpetrator to increase their privileges	20 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the storage_driver_domain driver in the Role-Based Access Control (RBAC) subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform allows a perpetrator to increase their privileges.	20 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the map_keys_roles() function in the RBAC role management subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform allows a perpetrator to bypass existing security mechanisms.	20 May 202600:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the hvm_serial component in the Role-Based Access Control (RBAC) access management subsystem of the XCP-ng hypervisor and the XenServer server virtualization platform allows a perpetrator to gain write access to arbitrary files.	20 May 202600:00	–	bdu_fstec

29 Apr 2026 16:36Current

5.4Medium risk

Vulners AI Score5.4

CVSS 49.4

EPSS0.0014

SSVC

role based access control pool administrator vm administrator dom0 exposure vm parameters pci passthrough system domain storage domain arbitrary file write