XAPI vulnerabilities

6 known vulnerabilities in XAPI from Xen. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.4 Critical severity

  XAPI: Execution with Unnecessary Privileges

  CVE-2026-42486Jul 9, 2026Xen

  [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different roles, using Role Based Access Control. For more details, see: https://docs.xense

• 9.4 Critical severity

  XAPI: Execution with Unnecessary Privileges

  CVE-2026-23562Jul 9, 2026Xen

  [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different roles, using Role Based Access Control. For more details, see: https://docs.xense

• 9.4 Critical severity

  XAPI: Execution with Unnecessary Privileges

  CVE-2026-23561Jul 9, 2026Xen

  [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different roles, using Role Based Access Control. For more details, see: https://docs.xense

• 9.4 Critical severity

  XAPI: Execution with Unnecessary Privileges

  CVE-2026-23560Jul 9, 2026Xen

  [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different roles, using Role Based Access Control. For more details, see: https://docs.xense

• 9.4 Critical severity

  XAPI: Execution with Unnecessary Privileges

  CVE-2026-23559Jul 9, 2026Xen

  [This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] XAPI can configure different users with different roles, using Role Based Access Control. For more details, see: https://docs.xense

• 9.4 Critical severity

  There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try…

  CVE-2025-58146Jul 9, 2026Xen

  There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try generating the notification using the unsanitised input. This causes the database's event thread to terminate and cease further processing. 2. XAPI's UTF-8 encoder imple