# Citrix XenServer vulnerabilities Source: https://junglewise.ai/threats/technologies/xenserver Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/xenserver.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 11 vulnerabilities in Citrix XenServer: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2017-5573, was published on 30 January 2017. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 11 (0 critical, 0 exploited in the wild) ## About Citrix XenServer A virtualization platform based on the Xen Project hypervisor for managing cloud and server workloads. ## Latest Citrix XenServer vulnerabilities - [CVE-2017-5573: Citrix XenServer authorization bypass in xapi](https://junglewise.ai/threats/cve-2017-5573-citrix-xenserver-authorization-bypass-in-xapi) (medium, CVSS 4.9, published 30 Jan 2017) - [CVE-2017-5572: Citrix XenServer database corruption via xapi privilege escalation](https://junglewise.ai/threats/cve-2017-5572-citrix-xenserver-database-corruption-via-xapi-privilege-escalation) (medium, CVSS 6.5, published 30 Jan 2017) - [CVE-2016-10025: Xen VMFUNC emulation NULL pointer dereference on AMD SVM](https://junglewise.ai/threats/cve-2016-10025-xen-vmfunc-emulation-null-pointer-dereference-on-amd-svm) (medium, CVSS 5.5, published 26 Jan 2017) - [CVE-2016-10024: Xen denial of service via instruction stream modification in x86 PV guests](https://junglewise.ai/threats/cve-2016-10024-xen-denial-of-service-via-instruction-stream-modification-in-x86) (medium, CVSS 6, published 26 Jan 2017) - [CVE-2016-9386: Xen x86 emulator privilege escalation via NULL segment handling](https://junglewise.ai/threats/cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling) (high, CVSS 7.8, published 23 Jan 2017) - [CVE-2016-9385: Xen x86 segment base write emulation denial of service](https://junglewise.ai/threats/cve-2016-9385-xen-x86-segment-base-write-emulation-denial-of-service) (medium, CVSS 6, published 23 Jan 2017) - [CVE-2016-9383: Xen broken bit test instruction emulation memory corruption](https://junglewise.ai/threats/cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption) (high, CVSS 8.8, published 23 Jan 2017) - [CVE-2016-9382: Xen x86 task switch privilege escalation in VM86 mode](https://junglewise.ai/threats/cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode) (high, CVSS 7.8, published 23 Jan 2017) - [CVE-2016-9381: Xen QEMU race condition in shared ring processing](https://junglewise.ai/threats/cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing) (high, CVSS 7.5, published 23 Jan 2017) - [CVE-2016-9380: Xen pygrub arbitrary file read and deletion via delimiter injection](https://junglewise.ai/threats/cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter) (high, CVSS 7.5, published 23 Jan 2017) - [CVE-2016-9379: Xen pygrub delimiter injection in S-expression output](https://junglewise.ai/threats/cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output) (high, CVSS 7.9, published 23 Jan 2017) ## Most severe Citrix XenServer vulnerabilities - [CVE-2016-9383: Xen broken bit test instruction emulation memory corruption](https://junglewise.ai/threats/cve-2016-9383-xen-broken-bit-test-instruction-emulation-memory-corruption) (high, CVSS 8.8, published 23 Jan 2017) - [CVE-2016-9379: Xen pygrub delimiter injection in S-expression output](https://junglewise.ai/threats/cve-2016-9379-xen-pygrub-delimiter-injection-in-s-expression-output) (high, CVSS 7.9, published 23 Jan 2017) - [CVE-2016-9386: Xen x86 emulator privilege escalation via NULL segment handling](https://junglewise.ai/threats/cve-2016-9386-xen-x86-emulator-privilege-escalation-via-null-segment-handling) (high, CVSS 7.8, published 23 Jan 2017) - [CVE-2016-9382: Xen x86 task switch privilege escalation in VM86 mode](https://junglewise.ai/threats/cve-2016-9382-xen-x86-task-switch-privilege-escalation-in-vm86-mode) (high, CVSS 7.8, published 23 Jan 2017) - [CVE-2016-9381: Xen QEMU race condition in shared ring processing](https://junglewise.ai/threats/cve-2016-9381-xen-qemu-race-condition-in-shared-ring-processing) (high, CVSS 7.5, published 23 Jan 2017) - [CVE-2016-9380: Xen pygrub arbitrary file read and deletion via delimiter injection](https://junglewise.ai/threats/cve-2016-9380-xen-pygrub-arbitrary-file-read-and-deletion-via-delimiter) (high, CVSS 7.5, published 23 Jan 2017) - [CVE-2017-5572: Citrix XenServer database corruption via xapi privilege escalation](https://junglewise.ai/threats/cve-2017-5572-citrix-xenserver-database-corruption-via-xapi-privilege-escalation) (medium, CVSS 6.5, published 30 Jan 2017) - [CVE-2016-10024: Xen denial of service via instruction stream modification in x86 PV guests](https://junglewise.ai/threats/cve-2016-10024-xen-denial-of-service-via-instruction-stream-modification-in-x86) (medium, CVSS 6, published 26 Jan 2017) - [CVE-2016-9385: Xen x86 segment base write emulation denial of service](https://junglewise.ai/threats/cve-2016-9385-xen-x86-segment-base-write-emulation-denial-of-service) (medium, CVSS 6, published 23 Jan 2017) - [CVE-2016-10025: Xen VMFUNC emulation NULL pointer dereference on AMD SVM](https://junglewise.ai/threats/cve-2016-10025-xen-vmfunc-emulation-null-pointer-dereference-on-amd-svm) (medium, CVSS 5.5, published 26 Jan 2017) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Citrix technologies - [Citrix NetScaler Gateway](https://junglewise.ai/threats/technologies/gateway): 38 vulnerabilities - [Citrix NetScaler ADC](https://junglewise.ai/threats/technologies/netscaler-adc): 26 vulnerabilities - [Citrix NetScaler](https://junglewise.ai/threats/technologies/netscaler): 8 vulnerabilities - [Citrix Application Delivery Controller (ADC)](https://junglewise.ai/threats/technologies/application-delivery-controller-adc): 5 vulnerabilities - [Citrix Provisioning Services](https://junglewise.ai/threats/technologies/provisioning-services): 5 vulnerabilities - [Citrix Sd-Wan Wanop Appliance](https://junglewise.ai/threats/technologies/sd-wan-wanop-appliance): 4 vulnerabilities - [Citrix UniconOS](https://junglewise.ai/threats/technologies/uniconos): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Citrix XenServer vulnerabilities", https://junglewise.ai/threats/technologies/xenserver, 13 November 2026.