XenServer 8.4 and 9: Update Appliances and Hosts for the Critical Management-Network Flaw

Citrix bulletin CTX697256 (3 Nov 2026) describes Critical vulnerabilities in XenServer 8.4 and 9 — including a headline issue associated with CVE-2026-98432 — that may allow an unauthenticated attacker on the management network to compromise hosts and appliances (Workload Balancing, Conversion Manager); Citrix recommends applying the latest updates from your update channel and provides upgrade and mitigation guidance, with no proof of active exploitation reported.