Citrix XenServer vulnerability needs management network access
Citrix has disclosed a critical XenServer vulnerability that could let an unauthenticated attacker compromise virtualization hosts and supporting appliances. Tracked as CVE-2026-98432, the flaw requires access to the management network, which limits which systems are exposed. XenServer releases and affected appliances The November 3 security bulletin covers XenServer 8.4 and XenServer 9, along with affected Workload Balancing and Conversion Manager appliances. Citrix researchers said the issue could compromise the host,…