Citrix XenServer Vulnerabilities Could Allow Malicious VM Users to Compromise Host Systems

What happened?

Citrix has disclosed four XenServer vulnerabilities, including three that could let a malicious user with elevated rights inside a virtual machine compromise or crash the underlying host. Citrix published the high-severity bulletin CTX697170 on October 13, 2026, covering XenServer 8.4 and XenServer 9. Citrix lists the advisory in its XenServer security bulletin archive. The host-impacting flaws are tracked as CVE-2026-79610, CVE-2026-102700, and CVE-2026-102701. A fourth issue, CVE-2026-79611, has a narrower effect.

Key details

• Citrix disclosed four XenServer vulnerabilities in bulletin CTX697170 published on October 13, 2026.
• Three vulnerabilities allow a privileged guest VM user to compromise or crash the underlying host.
• The host-impacting flaws are tracked as CVE-2026-79610, CVE-2026-102700, and CVE-2026-102701.
• A fourth vulnerability, CVE-2026-79611, may let an unprivileged guest user crash only that guest VM.
• CVE-2026-102700 affects only XenServer 8.4; the other three affect both XenServer 8.4 and XenServer 9.
• The advisory does not confirm active exploitation, exploit details, or fixed builds.
• Citrix recommends applying published security updates promptly per its bulletin archive.

Summarised by SecOraLens from Cyber Security News. Always read the original source before acting. How SecOraLens verifies advisories.