CYBERSECURITYTRACKER
Permanent story citation

Check your X.Org server version because a dozen vulnerabilities have been patched

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9568

As cited

Copy frozen at (site build).

vulnerabilities

Check your X.Org server version because a dozen vulnerabilities have been patched

X.Org released patches for 12 security vulnerabilities across xorg-server 21.1.25 and xwayland-24.1.14, with nine flaws enabling arbitrary code execution and three capable of crashing the server or leaking information. Ten of the 12 vulnerabilities require an authenticated X client connection, while CVE-2026-93524 and CVE-2026-93536 do not require that authentication.

Why it matters: Organizations running X.Org servers must update immediately to mitigate the risk of remote code execution from both authenticated clients and unauthenticated network access via CVE-2026-93524 and CVE-2026-93536.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary