Citrix XenServer Multiple Vulnerabilities

Release Date: 30 Jul 2026

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities have been identified in Citrix XenServer. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, security restriction bypass and data manipulation on the targeted system.

---

Impact

• Denial of Service
• Data Manipulation
• Security Restriction Bypass

---

System / Technologies affected

• XenServer 8.4
• XenServer 9

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696836&articleURL=XenServer_Security_Update_for_Multiple_Issues

---

Vulnerability Identifier

• CVE-2026-42492
• CVE-2026-62428
• CVE-2026-62431
• CVE-2026-62432
• CVE-2026-62434
• CVE-2026-62435
• CVE-2026-62436

---

Source

• Citrix

---

Related Link

• https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696836&articleURL=XenServer_Security_Update_for_Multiple_Issues