By Tamilselvan
Publication Date: 2026-11-05 08:30:00
Citrix has issued critical security advisories addressing eight XenServer vulnerabilities and a separate Google Brotli issue affecting Unicon eLux Scout components.
The XenServer flaws could enable host compromise, attacks against management appliances, compromise of network-booting virtual machines, or bypasses of guest boot protections.
Bulletin CTX697256, published November 3, 2026, covers XenServer 8.4 and XenServer 9. Separately, bulletin CTX697300 identifies CVE-2026-111497 in on-premises Scout management and gateway deployments, with updated remediation instructions published on November 3.
Critical Citrix XenServer Vulnerabilities
CVE-2026-98432 may allow an unauthenticated attacker on the management network to compromise a XenServer host, running Workload Balancing appliances, Conversion Manager appliances, or multiple affected targets.
The issue also affects Workload Balancing versions before 2026.1.1 and Conversion Manager versions before 2026.2.0….
