Xen publishes XSA-530 on multiple XAPI RBAC issues
Original title: Xen Security Advisory 530 v2 (CVE-2026-102706,CVE-2026-102707,CVE-2026-102708,CVE-2026-119779,CVE-2026-119780) - XAPI: Multiple RBAC issues (update)
Version 2 makes five CVE-tracked XAPI role issues public; versions and fixes are not stated.
The Xen.org security team posted Xen Security Advisory 530 version 2 for CVE-2026-102706, CVE-2026-102707, CVE-2026-102708, CVE-2026-119779 and CVE-2026-119780. The update labels the XAPI role-based access control issues a public release. The available text says XAPI assigns users different roles but does not describe the flaws, affected versions or fixes.
Unconfirmed: The feed text is truncated, so flaw details, versions and fixes are not stated.
- The advisory identifier is XSA-530 version 2.
- Five CVEs are listed together in the notice.
- The version 2 change noted is public release.
- Further issue details are cut off in the post.
Impact: role-based access control issues in XAPI
| Product | Affected |
|---|---|
| Xen XAPI | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-102706 | — | — | — | ||
| CVE-2026-102707 | — | — | — | ||
| CVE-2026-102708 | — | — | — | ||
| CVE-2026-119779 | — | — | — | ||
| CVE-2026-119780 | — | — | — |
From the original article
Posted by Xen . org security team on Nov 10 Xen Security Advisory CVE-2026-102706,CVE-2026-102707,CVE-2026-102708,CVE-2026-119779,CVE-2026-119780 / XSA-530 version 2 XAPI: Multiple RBAC issues (update) UPDATES IN VERSION 2 ==================== Public release. ISSUE DESCRIPTION ================= XAPI can configure different users with different roles, using Role Based Access Control.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.