Skip to main content

CVE-2026-88771 through CVE-2026-88778 and CVE-2026-88779, what you should know and how to fix your NetScaler ADC, NetScaler Gateway

NetScaler

This blogpost is made to help you understand CVE-2026-88771, CVE-2026-88772 and the six other vulnerabilities in Citrix security bulletin CTX697096, and CVE-2026-88779, the SAML attack, which Citrix published in a separate bulletin, CTX697174. It also explains how you can check if you are vulnerable, and gives community guidelines on how to fix your environment. This blogpost is not covering the details of the exploits out there, as I have no interest in sharing what the red team is doing. All responsibility is your own. I highly recommend you read the blogpost and take action immediately, don’t hesitate.

(Last updated 6th October 2026)

Continue reading

XenServer 9 preview

XenServer 9 preview is finally here released February 19th 2026.

What’s new in XenServer 9 preview

  • NUMA Awareness: Enhanced performance through optimizations for Non-Uniform Memory Access (NUMA) server CPU architectures.
  • Driver Multi-Versioning: Flexibility to support multiple driver versions without requiring driver disks.
  • (Coming Soon) – Host Secure Boot: Strengthened security with UEFI Secure Boot for host systems.
  • Improved Host Network Name Handling
  • Updated Xen Hypervisor (v4.20)
  • Dom0 Kernel Upgraded to 6.x
  • New base Operating System for the Control Domain
  • GFS2 SRs Now Use Corosync3

NOTE:

GFS2 SRs on XenServer 8.4 must be converted from Corosync2 to Corosync3 before upgrading to XenServer 9. Refer to the Corosync feature documentation.

XS9 is a preview
Dont expect you can use any NVIDIA vGPU drivers yet, but you can use GPU pass-through for VM and do testing, which I am going to do.

NUMA optimization

XenServer® 9 introduces NUMA optimization to improve VM performance on NUMA hosts. NUMA optimization co-locates VM vCPUs and memory on the same NUMA node to reduce memory-access latency. This feature is enabled by default, persists across VM lifecycle operations and reboots, and adds per-VM RRD metrics for visibility and troubleshooting. Performance gains vary by workload and CPU architecture.

Secure Boot for hosts

XenServer® 9 adds support for Secure Boot in firmware for host installation and runtime, including boot from SAN. Secure Boot enforces signature verification for each boot component to prevent untrusted code from running and to improve platform integrity. Mixed pools (hosts with Secure Boot enabled and disabled) are supported. You can enable Secure Boot after an upgrade from XenServer 8.4 or on fresh installs. When finalised, you will be able to use the Microsoft UEFI CA; currently a feature preview is available that uses a XenServer development certificate, for more information see Secure Boot for XenServer 9.

Predictable dom0 network interface naming

XenServer® 9 adopts systemd predictable network interface names in the control domain (dom0) and consolidates interface management in Toolstack networkd. Interfaces are no longer forcibly renamed to the legacy ethN pattern (for example, eth0, eth1). This change improves stability and maintainability, reduces ambiguity across reboots and hardware changes, and aligns naming with industry standards. Update scripts and automation that assume ethN device names to discover interfaces dynamically (for example, by MAC address or by using xe pif-list).

Changes to guest operating system support

For the full list of supported guest operating systems in XenServer 9, see Guest operating system support.

Removed

Support for the following guests has been removed in XenServer 9:

  • SUSE Linux Enterprise Desktop 12 SP4 (64-bit)

Restrict use of port 80

For new installations, XenServer 9 disables HTTP (port 80) on the management interface and requires TLS (HTTPS) for secure connections. Upgrades retain existing port settings.

For more information about how to open port 80, see Restrict use of port 80.

Removed features

The following features are no longer supported in XenServer 9:

  • Host BIOS Boot Support
  • Legacy NVIDIA GPU Support (Maxwell & Pascal)
  • Software FCoE
  • Linux Bridge Network Stack

Licensing changes

File based licensing system EOL notification

License Activation Service (LAS) is the next generation technology for product activations across the suite of Citrix products.

NOTE:

File based licensing system, traditionally used for activating various on-premises components, will be End of Life (EOL) on April 15, 2026.

LAS will be the only way to activate and license Citrix on-premises components after April 15, 2026. To remain supported, your XenServer deployment must be on a LAS compatible version.

Requirement

Should you have questions or concerns, contact Customer Care. Citrix may limit or suspend your Citrix Maintenance for non-compliance with these requirements without liability in addition to any other remedies Citrix may have at law or equity. These requirements don’t apply where prohibited by law or regulation.

License Activation Service

Register your Citrix License Server with Citrix Cloud to use the licenses and entitlements that your License Activation Service holds. For more information, see Licensing.

Currently, you can still use the previous licensing mechanism to host license files on your Citrix License Server. However, in future, XenServer can only be licensed through the License Activation Service.

Citrix Virtual Apps and Desktops™ and Citrix DaaS

For more information about getting a XenServer license, see the XenServer website.

XenServer is now an entitlement of the Citrix for Private Cloud, Citrix Universal Hybrid Multi-Cloud, Citrix Universal MSP, and Citrix Platform License subscriptions for running your Citrix workloads. Read more.

Source

https://www.xenserver.com/editions/xs9-preview

https://docs.xenserver.com/en-us/xenserver/9/overview

Download XenServer 9 preview here

FSLogix 26.01

Microsoft have 13th January 2026 released a new version of FSLogix.

version 3.26.102.18413

This release focuses on stability, reliability, and quality fixes rather than introducing new features.

Recommendation if you are using FSLogix in your End User Computing (EUC) anything from Microsoft RDS, AVD, Citrix, Omnissa, Parallels RAS or other EUC platform, I would highly recommend you plan upgrading your environment and test properly before rolling out the release to production.

Fixed issues

  • Updated the default identity exclusions as defined in Device identity and desktop virtualization | Microsoft Learn.
  • Fixed the registry exclusions.
  • Fixed logging when a user is excluded using local exclude groups.
  • Fixed FRX.exe copy-profile utility.
  • Updated default redirections in Outlook for Windows.
  • Fixed an issue where a disk may not detach correctly after a compact operation.
  • Fixed a potential logon hang when a profile does not unload successfully during a timeout operation (< 30 sec).
  • Fixed extended status of SupportedSize for VHD compact operations.
  • Fixed an issue where package registration could fail due to missing authentication context.

Download

You can download FSLogix 26.01 (3.26.102.18413) here

Source

https://learn.microsoft.com/en-us/fslogix/overview-release-notes

https://learn.microsoft.com/en-us/fslogix/overview-what-is-fslogix

VMware vSphere 9

In this blogpost I will as a VMware vExpert cover whats new in VMware vSphere 9

VMware vSphere 9 was released, June 17 2025 as part of VMware vSphere Foundation 9 and VMware Cloud Foundation 9

Build number: 24957454

Components of VMware vSphere 9

  • VMware vSphere ESXi9
  • VMware vCenter 9

Versions of VMware vSphere 9

  • VMware vSphere Foundation 9
  • VMware Cloud Foundation 9

Upgrade path for VMware vSphere 9

Streamlined Upgrade Path: vSphere 9.0 supports direct upgrades from vSphere 8.0, enabling smoother transitions for recent versions.
Compatibility Requirements: vCenter 9.0 requires ESX 8.0 or later, dropping support for ESX 7.0 and earlier versions.
Lifecycle Management Shift: Traditional VMware Update Manager is replaced by image-based lifecycle management for all clusters and hosts.

Key New Features in vSphere 9.0

1. Memory Tiering over NVMe
vSphere 9 introduces NVMe Memory Tiering, allowing local NVMe devices to serve as a secondary memory tier. This can expand effective host memory capacity and improve VM density without requiring more DRAM. 

2. Virtual Hardware Version 22

  • Updated VM hardware version that enables support for up to 960 vCPUs and larger memory limits (e.g., ~16 TB).
  • Improved device support (NVMe, PCI passthrough, graphics).
    This unlocks greater performance and scalability for heavy workloads. 

3. Enhanced Storage Support

  • Native support for 4K SSDs on compatible hardware.
  • Write Zeroes support and namespace write protection for virtual NVMe devices, which improve performance and storage efficiency. 

4. Lifecycle Management Upgrades

  • vSphere Lifecycle Manager (vLCM) enhancements, including mixed-hardware clusters and composite cluster images.
  • Traditional baselines-based patching is replaced by image-based lifecycle workflows. 

5. vMotion & Cluster Improvements

  • Optimizations for vMotion (including better performance for GPU-enabled workloads).
  • Improvements to managing clusters and lifecycle across hosts. 

6. Kubernetes & Modern Workloads Support

  • Enhanced support and tooling for integrating Kubernetes workloads via Supervisor services (especially in vSphere Foundation / Cloud Foundation contexts).
  • Live VM customization APIs and enhanced automation. 

7. API & Developer Experience Enhancements

  • Open API 3.0 and a more unified SDK for automation across vCenter, vSAN, and core APIs.
  • Simplified automation and scripting using consistent API sets. 

8. Security & Compliance Improvements

  • Enhanced support for modern security standards including TLS 1.3 and vTPM support.
  • Namespace write protection and disk protections for virtual storage. 

9. Changes in Deprecated/Removed Features
vSphere 9 also marks the deprecation or removal of certain legacy features such as Auto Deploy, Host Profiles, baselines (in favor of vLCM), and parts of older management tooling — signaling VMware’s shift toward more modern infrastructure management. 

Source

https://techdocs.broadcom.com/us/en/vmware-cis/vsphere/vsphere/9-0/release-notes.html

Citrix Virtual Apps & Desktop 7 2411

Citrix have released a new version of Citrix Virtual Apps and Desktop 7 2411 CR.

Citrix CVAD Release 7 2411 CR is now available for download,20 December, 2024.

Citrix Virtual Apps & Desktop 7 2411 is a CR release. CR is supported 1 year.

Citrix raises the bar of for user experience and new product release of following technologies:

  • WebStudio 2411
  • Director 2411
  • Citrix Licensing 11.17.2 build 51000
  • Virtual Delivery Agents 2411 for Windows ServerOS and ClientOS
  • Virtual Delivery Agent 2411 for Linux
  • Virtual Desktop Agent 2411 for MacOS
  • Citrix Federated Authentication Service 2411
  • Citrix Provisioning 2411
  • Profile Management 2411
  • Workspace Environment Management 2411
  • Session Recording 2411
  • Citrix Secure Private Access 2411
  • Citrix Virtual Apps and Desktop Service (Oct-Dec 2024)
  • Workspace App 2411 for Windows
  • Workspace App 2411 for Linux
  • Workspace App 2411 for Chrome
  • Workspace App 2411 for Android
  • Workspace App 2411 for MacOS
  • Workspace App 2411 for HTML5
  • Workspace App 2411 for ChromeOS

Continue reading