CVE-2025-66391

In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to reset the password of a user account...

CVE-2025-66391

In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to reset the password of a user account...

CVE-2025-66391

An authorization flaw in Citrix Cloud (versions prior to 2025-11-10) allows an account with read-only access to initiate workflows intended for write operations . For instance, an attacker can trigger a password reset process, which causes the system to send a one-time password to an attacker-con...

CVE-2025-66391

In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to reset the password of a user account...

CVE-2025-66391: Undefined Security Weakness

In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to reset the password of a user account...

PT-2026-50389

Name of the Vulnerable Software and Affected Versions Citrix Cloud versions prior to 2025-11-10 Description An authorization flaw allows an account with read-only access to trigger the start of workflows intended for write operations. For example, an attacker can initiate a password reset process...

EUVD-2021-10043

Malware in sbrugna...

CVE-2021-22914

Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue...

Citrix Cloud VDIs hosted in Azure by Citrix Cloud shut down constantly with user sessions

When creating VDIs from a Master image that are rolled out with MCS into a Azure subscription - Users machines are constantly shutting down - Even when users are logged onto the machines, they consistently get shutdown after several minutes it can vary between 3-5 | 25-30 -The user will see a...

Citrix Cloud Intermittent loss of connectivity to On-Prem AD

When attempting to run MCS Process - Ran into issues contacting the On-Prem Active Directory Citrix.CloudServices.ADAgent EventID 10102 Errors: Message=Unable to connect to the forest associated with domain "DOMAINNAME.local"...

Citrix Cloud - Custom URL Conflict: "Unable to Process Your Request" on Workspace Connection

Administrators attempting to configure Citrix Conditional Authentication find that the option to utilize custom URLs or domains is unavailable. There is no apparent setting within the Conditional Authentication configuration interface to input or apply a custom URL...

uberAgent shows no data is being found for the Citrix Cloud environment

uberAgent logging shows no errors for connectivity to Citrix Cloud, but shows that no data about the environment is being found. 2025-03-12 10:00:50.000 -0400,DEBUG,ORG,HOSTNAME,2264,GetInformation,No Citrix site information found.2025-03-12 10:00:50.000...

Citrix Cloud: Workspace App configuration is missing silent plugin install for teams or other apps

To understand reason for certainplugin install for teams or other apps is currently unavailable along workspace configuration of Daas console On trying to enable the "Updates and Plug-ins" options for MSTeam, WebEx or Zoom the options to enabled or disable the below are not showing or missing in...

Citrix Cloud Azure Questions on MCS Disk Network Access

Security alerts are receiving for VM disks on our Citrix Cloud Azure environment and is raising Security concerns. Currently, all our VDIs have two disks, an Identity and Data disk. These disks are created with the default Azure setting of “Enable public access from all networks”. We are...

FAS - The RA certificate expiry notification is not displayed in the Cloud console

When the FAS Registration AuthorityRA certificate expires, the RA certificate expiry notification is not displayed in the Citrix Cloud management console...

Citrix Cloud with Okta SAML IDP initiated login doesn't work

Citrix Cloud SAML initiated login doesn't work following error is thrown "Unable to Process Your Request" Everything is successful if we use SP initiated log in...

Connector new installs fail due to installer is unable to verify the certificate chain

The new installation of Citrix Cloud Connector will result in the following error: "Unable to validate certificate chain while installing connector"...

How to Identify Your Citrix Cloud ID

In this article we will show how to identify the Citrix Cloud ID of the tenant you are currently working on. This ID is important to have when engaging with Citrix Support to ensure engagement on the environment you need assistance with. This is especially critical for customers with multiple...

Citrix DaaS: Unable to login to Citrix cloud with MFA

Unable to login to Citrix Cloud with MFA with error " Opps! Something went wrong...

With the PVS console installed, PowerShell cmdlets targeting On-Prem DDCs prompt for cloud login

On a server with the PVS console installed, executing CVAD cmdlets targeting on-prem DDCs e.g. Get-BrokerSite -AdminAddress will encounter popups prompting for Citrix Cloud sign-on...