Product by Citrix Systems

    Xenserver

    12 known vulnerabilities in Xenserver (Citrix Systems), 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Xenserver (Citrix Systems)
    CriticalCVE-2026-23561

    Multiple RBAC issues in XAPI

    also in 1 other product

    —
    CriticalCVE-2026-23560

    Multiple RBAC issues in XAPI

    also in 1 other product

    —
    CriticalCVE-2026-23559

    Multiple RBAC issues in XAPI

    also in 1 other product

    —
    CriticalCVE-2026-23556

    oxenstored keeps quota related use counts across domain destruction

    also in 2 other products

    —
    CriticalCVE-2025-58151

    varstored: TOCTOU issues with mapped guest memory

    also in 1 other product

    —
    HighCVE-2025-58150

    x86: buffer overrun with shadow paging + tracing

    also in 3 other products

    8.8
    HighCVE-2026-23558

    grant table v2 race in status page mapping

    also in 3 other products

    7.8
    HighCVE-2026-23554

    Use after free of paging structures in EPT

    also in 3 other products

    7.8
    MediumCVE-2024-28956

    Intel(R) Processors: Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution

    also in 10 other products

    5.6
    LowCVE-2026-23553

    x86: incomplete IBPB for vCPU isolation

    also in 3 other products

    2.9
    MediumCVE-2025-24495

    Intel(R) Core™ Ultra Processors: Incorrect Initialization of Resource

    also in 8 other products

    5.6
    MediumCVE-2025-20012

    Intel(R) Core™ Ultra Processors: Incorrect Behavior Order

    also in 8 other products

    4.9

    All products by Citrix Systems