CVE-2026-110111 | Vates Xen Orchestra up to 6.8.x ESXi Import vm.importFromEsxi/vm.importMultipleFromEsxi __proto__ access control

SecurityVulns
Yanac

A vulnerability categorized as very critical has been discovered in Vates Xen Orchestra up to 6.8.x. This vulnerability affects the function vm.importFromEsxi/vm.importMultipleFromEsxi of the component ESXi Import. The manipulation of the argument __proto__ results in improper access controls.

This vulnerability is identified as CVE-2026-110111. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More