PT-2026-58855

Name of the Vulnerable Software and Affected Versions Citrix XenServer SDK versions prior to 26.15.0 XenCenter versions prior to 2026.4.0 Description Some SDKs lack proper TLS verification during network communication with a host running XAPI. This flaw allows an attacker to perform a...

EUVD-2013-6597

Malware in sbrugna...

EUVD-2012-4531

Malware in sbrugna...

EUVD-2010-2623

Malware in sbrugna...

CVE-2010-2619

Citrix XenServer 5.0 Update 2 and earlier, and 5.5 Update 1 and earlier, when using a pvops kernel, allows guest users to cause a denial of service in the host via unspecified vectors that trigger "incorrectly set flags."...

CVE-2010-0633

Unspecified vulnerability in Citrix XenServer 5.0 Update 3 and earlier, and 5.5, allows local users to bypass authentication and execute unspecified Xen API XAPI calls via unknown vectors...

CVE-2018-7541

creationtimestamp| type| source ---|---|--- 2018-12-31 06:47:32+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-citrix-xenserver-virtualisointiohjelmistossa...

PT-2011-36: Insufficient authorization in Citrix XenServer Virtual Switch Controller

Positive Research Center has discovered an insufficient authorization in Citrix XenServer Virtual Switch Controller. Low privileged Read-Only users can change certain configuration parameters e.g. hostname and domain. Configuration snapshots that contain the entire system configuration including...