Citrix security advisory (AV26-1034)
Canada's Cyber Centre urges updates for Citrix UniconOS and XenServer flaws listed in AV26-1034.
The Canadian Centre for Cyber Security issued AV26-1034 on October 13, 2026, pointing administrators to Citrix vulnerabilities in UniconOS and XenServer. Affected UniconOS releases are those before 2603 LTSR CU2 and before 2607.2 CR; XenServer 8.4 and 9 are also listed. The cited identifiers are CVE-2026-53562, CVE-2026-53563, CVE-2026-53564, CVE-2026-79610, CVE-2026-102700, and CVE-2026-102701. The alert does not describe exploitation and urges review of Citrix bulletins and installation of available updates.
- Canadian Cyber Centre alert AV26-1034 covers Citrix UniconOS and XenServer.
- UniconOS before 2603 LTSR CU2 and 2607.2 CR is affected.
- XenServer versions 8.4 and 9 are listed.
- Six CVE identifiers are cited, with no exploitation reported.
- Vendors
- Citrix
- Organizations
- Canadian Centre for Cyber Security
- Countries
- Canada
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-79610+1 related CVE | Stale grant-table pointers in Xen may enable host compromise | 8.8 group max | — | ||
| CVE-2026-102701 | — | — | — | ||
CVE-2026-53562+2 related CVEs | Link-following flaw in Citrix UniconOS | 8.5 group max | — |
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1034 Date: October 13, 2026 As of October 13, 2026, Citrix is affected by vulnerabilities in the following products: UniconOS Prior to 2603 LTSR CU2 Prior to 2607. 2 CR XenServer Version 8. 4 XenServer Version 9 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.