PT-2026-136760

CVE-2026-102703

Published

2026-11-03

Updated

2026-11-04

Score

N/A

Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

Big breaking: we (@CodeAntAI ) found an 11-year-old Xen hypervisor escape.

One malicious VM could read/write all other VMs' memory, Dom0 included.

Affects Citrix XenServer and every Xen host.

Patched today: XSA-523 (CVE-2026-102703/102704).

Researchers

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾