XenServer Security Update for Multiple Issues
CTX696836
Scope
What the vendor says is affected
- XenServer
- These issues affect both XenServer 8.4 and XenServer 9; versions of the XenServer Terraform provider versions before version 0.3.0 are affected by the Terraform issue.
Next step
What the vendor recommends
We have pushed updates to both the Early Access and Normal update channels of each of XenServer 8.4 and XenServer 9. We recommend that customers update to the latest version from their chosen channel following the instructions at https://docs.xenserver.com/en-us/xenserver/8/update or https://docs.xenserver.com/en-us/xenserver/9/update We have also published an updated Terraform provider, version 0.3.0. We recommend that customers using the XenServer Terraform provider upgrade to that version, either by using standard Terraform tooling or by downloading the updated version directly from https://github.com/xenserver/terraform-provider-xenserver/releases. Acknowledgement & Credits CVE-2026-79605 and CVE-2026-79606: Cloud Software Group (Citrix) thanks Jihwan Yoon of NAVER Cloud for working with us to keep our customers secure.
Review the complete instructions on the vendor's siteTimeline
When this advisory changed
- Published by Citrix
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.
Vulnerabilities
CVEs named in this advisory
CVE-2026-79605View CVSS, KEV, EPSS, and threat contextCVE-2026-79606View CVSS, KEV, EPSS, and threat contextCVE-2026-62437View CVSS, KEV, EPSS, and threat contextCVE-2026-79602View CVSS, KEV, EPSS, and threat contextCVE-2026-79604View CVSS, KEV, EPSS, and threat contextCVE-2026-83496View CVSS, KEV, EPSS, and threat context