CVE intelligence

CVE-2026-42491

Vulnerability intelligence

N/ACVSS not listedScore unavailable

What this means

Review the available evidence

CVE-2026-42491. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

What to do next

Remediation and response

Citrix Security Bulletins guidance

Vendor revision: Jul 14, 2026

Vendor remediation details

We have released updated versions of both XenCenter and the SDK. We recommend that customers update their existing XenCenter to the latest version using the built-in update functionality as documented at https://docs.xenserver.com/en-us/xencenter/current-release/updates-xencenter.html We recommend that customers using the SDK download the latest version from https://www.xenserver.com/downloads

CISA KEVNot listedBased on the latest collected catalog

EPSSUnavailableNo current score collected

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-42491?

No plain-language description is available from the current sources.