XenServer
ProductAm I affected?
Checked against NVD affected-version data on our server. Nothing you type is stored.
Security timeline
- Vulnerability reported by Trail of BitsCritical Citrix XenServer flaw could let unauthenticated attackers take over hosts
Recent news
Critical Citrix XenServer flaw could let unauthenticated attackers take over hosts
Citrix's November 3 bulletin describes CVE-2026-98432, a critical flaw in XenServer 8.4 and XenServer 9 that could let an unauthenticated attacker compromise virtualisation hosts and the Workload Balancing and Conversion Manager appliances. Exploitation requires access to the management network, so exposure depends on network reachability. Fixes are available through the Normal and Early Access channels.