Citrix has released security updates for XenServer to address security vulnerabilities (CVE-2026-42492, CVE-2026-62428, CVE-2026-62431, CVE-2026-62432, CVE-2026-62434, CVE-2026-62435, CVE-2026-62436). An attacker could exploit some of these vulnerabilities to trigger denial of service condition, data manipulation and security restriction bypass on the targeted system. These vulnerabilities affect XenServer versions 8.4 and XenServer 9.

More information on vulnerabilities and updates is available in Citrix Security Bulletins - citrix.com.