CVE-2026-102700

LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

With its original introduction, GNTTAB_cache_flush was made available uniformly. XSA-232 (CVE-2017-14318) then covered an omitted NULL pointer check, yet the addition of that check failed to adjust the subsequent error path. That error path fails to drop a page reference in case the specified page is owned by a special system domain (DOM_IO and DOM_COW are system domains which can have memory pages assigned to them.)

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://thedailytechfeed.com/critical-xenserver-flaws-could-let-vm-users-breach-the-host/

Full discourse1 post

The Daily Tech Feed@dailytechonx1d
New Citrix XenServer flaws in versions 8.4 & 9 threaten host systems if VMs have elevated rights. Watch out for CVE-2026-79610, CVE-2026-102700, CVE-2026-102701 & -79611. The bulletin reveals host-impacting vulnerabilities, guest crash risks, and no full exploit code yet. Confirm your XenServer release, apply CTX697170 updates, and lock down guest privileges to minimize risk. #Citrix #XenServer #Vulnerabilities #Cybersecurity #HostSecurity #PatchNow https://thedailytechfeed.com/critical-xenserver-flaws-could-let-vm-users-breach-the-host/
0000062
795 followersView on X

Explore more

Back to dashboard