Vates VMS Documentation (security advisories)

https://docs.vates.tech/security-advisories/advisories/2026/vates-sa-2026-062/

Added 2026-11-11 (S1): first-party advisories for XCP-ng and Xen Orchestra; VSA-2026-062 (exploited management-plane authentication bypass) was on no slice source and reached the run only through BleepingComputer. Advisory pages read cleanly with `extract`. Candidate: promote to active after 3 contributing runs. | 2026-11-11 health: the plain probe of the index sees no security vocabulary, so health_cmd reads the index with `extract`; the 2026 listing path answers 403 on every transport, so list advisories from the index and read each VSA page with `extract`. | 2026-11-11 health: the index page has no security vocabulary for the probe, so the record url is one advisory page (as censys-advisories does); list advisories from https://docs.vates.tech/security-advisories/ with `extract`.