Back to vendor advisories
Citrix Security BulletinsCTX697170

XenServer Security Update for CVE-2026-79610, CVE-2026-79610, CVE-2026-102700 and CVE-2026-102701

High 4 CVEs Published Oct 13, 2026 at 5:44 AM UTC

Summary

Several issues have been identified that affect XenServer 8.4 and XenServer 9. Three of these issues may allow a malicious privileged user in a guest VM to compromise or crash the host.

Products covered

  • XenServer

Remediation

We have pushed updates to both the Early Access and Normal update channels of each of XenServer 8.4 and XenServer 9. We recommend that customers update to the latest version from their chosen channel following the instructions at https://docs.xenserver.com/en-us/xenserver/8/update or https://docs.xenserver.com/en-us/xenserver/9/update

CVEs in this advisory 4

Updates

  1. Published by Citrix

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.