[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA5eGhw_4L7qu0X8LbKDYypQSWAIIQrF1ydlpvGxAi9Q":3},{"article":4,"iocs":45,"watch_terms":53,"solutions":54,"lesson":145},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"ddcfeae8-f69a-4e17-956a-13b173d06cb3","Critical Citrix XenServer Vulnerability Could Let Hackers Take Over Virtualization Hosts Without Authentication","critical-citrix-xenserver-vulnerability-could-let-hackers-take-over-virtualizati-a75cc6","Citrix has disclosed a critical XenServer vulnerability that could let an unauthenticated attacker compromise virtualization hosts and supporting appliances. Tracked as CVE-2026-98432, the flaw requires access to the management network, an important limit when assessing which systems are exposed. The November 3 security bulletin covers XenServer 8.4 and XenServer 9, alongside affected Workload Balancing and […] The post Critical Citrix XenServer Vulnerability Could Let Hackers Take Over Virtualization Hosts Without Authentication appeared first on Cyber Security News.","Citrix has disclosed a critical vulnerability, CVE-2026-98432, in XenServer that could allow unauthenticated attackers to compromise virtualization hosts and supporting appliances. The vulnerability requires access to the management network, limiting its exposure. Citrix has released patches for XenServer 8.4 and 9, as well as affected Workload Balancing and Conversion Manager appliances.","Critical Citrix XenServer vulnerability CVE-2026-98432 allows unauthenticated attackers to compromise virtualization","https:\u002F\u002Fcybersecuritynews.com\u002Fcritical-citrix-xenserver-vulnerability\u002F","https:\u002F\u002Fcybersecuritynews.com\u002Fwp-content\u002Fuploads\u002F2026\u002F11\u002FCritical-Citrix-XenServer-Vulnerability-Could-Let-Hackers-Take-Over-Virtualization-Hosts-Without-Authentication.webp","2026-11-05T07:24:28+00:00","2026-11-05T08:00:47.882898+00:00",8,[17,20,23,25],{"name":18,"type":19},"XenServer","product",{"name":21,"type":22},"Citrix","vendor",{"name":24,"type":19},"Workload Balancing",{"name":26,"type":19},"Conversion Manager","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":27,"icon":29,"name":30,"slug":31},null,"Vulnerabilities","vulnerabilities",[33,35,40],{"category":34},{"id":27,"icon":29,"name":30,"slug":31},{"category":36},{"id":37,"icon":29,"name":38,"slug":39},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":41},{"id":42,"icon":29,"name":43,"slug":44},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[46,50],{"type":47,"value":48,"context":49},"cve","CVE-2026-98432","Critical Citrix XenServer vulnerability allowing unauthenticated attacker compromise of virtualization hosts.",{"type":47,"value":51,"context":52},"CVE-2026-102703","Flaw allowing privileged guest user to compromise the host.",[21,18,24],{"controls":55,"vendors":139},[56,85,110],{"slug":57,"name":58,"problem":59,"products":60},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":86,"name":87,"problem":88,"products":89},"patch-management","Automated patch management","Known holes get closed in days, not months.",[90,94,102],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":86,"product_name":91,"url":92,"description":93},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":95,"vendor_name":96,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":111,"name":112,"problem":113,"products":114},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[115,123,131],{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":124,"vendor_name":125,"vendor_logo":126,"product_slug":127,"product_name":128,"url":129,"description":130},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":132,"vendor_name":133,"vendor_logo":134,"product_slug":135,"product_name":136,"url":137,"description":138},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",[140],{"slug":141,"name":21,"logo_path":142,"roles":143},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[144],"affected",{"slug":146,"title":147,"body":148,"framework_refs":149,"framework_notes":157},"critical-unauthenticated-citrix-xenserver-flaw-enables-full-host-takeover","Critical Unauthenticated Citrix XenServer Flaw Enables Full Host Takeover","A critical unauthenticated vulnerability in Citrix XenServer exposes virtualization hosts to complete compromise, meaning attackers with access to the management network need no credentials whatsoever to take over entire virtual environments. Virtualization hosts are high-value targets because compromising one can cascade across every guest workload running on that infrastructure. Citrix has released patches, but organizations that delay applying them leave their entire virtual estate at risk. The incident underscores that management interfaces for critical infrastructure must be both promptly patched and tightly network-isolated to limit blast radius.",[150,151,152,153,154,155,156],"CIS Control 7: Continuous Vulnerability Management","NIST SP 800-53 SI-2: Flaw Remediation","ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities","OWASP A06:2021 Vulnerable and Outdated Components","NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control","NIS2 Article 21(2)(b)","PCI DSS Requirement 6",{"NIS2 Article 21(2)(b)":158,"PCI DSS Requirement 6":159,"NIST SP 800-53 SI-2: Flaw Remediation":160,"OWASP A06:2021 Vulnerable and Outdated Components":161,"CIS Control 7: Continuous Vulnerability Management":162,"ISO\u002FIEC 27001:2022 A.8.8: Management of technical vulnerabilities":163,"NIST CSF 2.0 PR.AA: Identity Management, Authentication, and Access Control":164},"NIS2 requires essential and important entities to implement incident handling and vulnerability management practices; this obligation would drive both timely patching of XenServer and isolation of management networks to meet security baseline requirements.","Requirement 6 mandates that organisations develop and maintain secure systems by applying security patches promptly, which would directly govern the timely remediation of this critical hypervisor vulnerability in cardholder data environments.","SI-2 requires organisations to identify, report, and correct information system flaws on a defined schedule; applying this control would mandate prompt installation of Citrix's released patches across all affected appliances.","Running unpatched versions of XenServer and its appliances is precisely the scenario A06 addresses, highlighting the risk of using components with known, unmitigated vulnerabilities in critical infrastructure.","Regular, prioritised vulnerability scanning and patching would have identified CVE-2026-98432 immediately upon disclosure and driven timely remediation before attackers could exploit the unauthenticated flaw.","This control requires timely identification and remediation of technical vulnerabilities in information systems, directly covering the need to patch XenServer and its supporting appliances upon Citrix's disclosure.","The vulnerability allows unauthenticated access, meaning strong network-level access controls enforced around management interfaces—as PR.AA prescribes—would have prevented an attacker from reaching the vulnerable service in the first place."]