Detections
Analytics
Citrix XenServer 8.4.x / 9.x Multiple Vulnerabilities (CTX697170)
high Nessus Plugin ID 370480
Synopsis
A server virtualization platform installed on the remote host is affected by multiple vulnerabilities.Description
The version of Citrix XenServer installed on the remote host is 8.4.x or 9.x. It is, therefore, affected by multiple vulnerabilities as referenced in the CTX697170 advisory:- A grant table race on a v2 -> v1 -> v2 version change may allow a privileged user in a guest VM to compromise or crash the host. (CVE-2026-79610)
- A vulnerability in tapdisk may allow a privileged user in a guest VM to compromise or crash the host.
(CVE-2026-102701)
- A VMX VMentry failure with branch tracing and blocked states may allow an unprivileged user in a guest VM to crash that guest VM. (CVE-2026-79611)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. The vendor delivers this update through the XenServer update channels without changing the reported product version, so Nessus cannot determine whether the update has been applied.
Solution
Apply the latest updates from the Early Access or Normal update channel of XenServer 8.4 or XenServer 9 as described in the vendor advisory.See Also
https://xenbits.xenproject.org/xsa/advisory-517.html
https://xenbits.xenproject.org/xsa/advisory-518.html
Plugin Details
Severity: High
ID: 370480
File Name: citrix_xenserver_CTX697170.nasl
Version: 1.1
Type: Local
Family: Misc.
Published: 10/22/2026
Updated: 10/22/2026
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7
Percentile: 98
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C
CVSS Score Source: CVE-2026-79610
CVSS v3
Risk Factor: High
Base Score: 8.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/a:citrix:xenserver
Required KB Items: Host/local_checks_enabled, Settings/ParanoidReport, Host/XenServer/version
Patch Publication Date: 10/13/2026
Vulnerability Publication Date: 10/13/2026