XenServer Security Update for CVE-2025-27466, CVE-2025-58142, CVE-2025-58143 and CVE-2025-58146

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that collectively may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 CVE-2025-58146 Affected...

Citrix Director Infrastructure Monitoring - Incorrect IIS Certificate Validity status

When admin checks Storefront metrics in Citrix Director under Infrastructure Monitoring, incorrect IIS Certificate Validity status is displayed. All other metrics are displayed correctly. Example: StoreFront Details: Storefront is configured with correct certificate and a certificate chain is...

Resource has no available templates defined that are fully accessible by all hosts

When using the Citrx Virtual Desktop Setup Wizard in PVS to create a catalog, you get an error after choosing a host resource. Error : Resource has no available templates defined that are fully accessible by all hosts...

Citrix License Server - Error "The License Activation Service entitlement could not be retrieved"

After upgrading the License Server to the latest version License Server 11.17.2.0, Build 51000, the following warning message is observed: "The License Activation Service entitlement could not be retrieved. Check your connection to License Activation Service and restart the web services used for...

Citrix Workspace App for Windows restarts after .NET upgrade

Citrix Workspace App Restart Issue: Mitigating .NET Runtime Upgrade Impact If the user endpoint updates the .NET Desktop Runtime, any .NET Core-based app running at the time of the update might exhibit inconsistent behavior. To mitigate this issue, Citrix Workspace App restarts itself. Behavior o...

DDC 2203 - How to manually remove the stale DDC from Database

Old removed DDC is listed under Zones alongside the two current DDCs. "Get-BrokerController" and database table 'chbConfig.Controllers' shows working DDCs...

Error: Identity Assertion Logon failed Unrecognized Federated Authentication Service

Citrix FAS configured for authentication. Published Desktop or Published Application fails to launch with error: "Identity Assertion Logon failed. Unrecognized Federated Authentication Service"...

CVE-2019-13609 - CRLF Vulnerability in Citrix License Server for Windows and VPX

Description of Problem A Carriage Return Line Feed CRLF injection vulnerability has been identified in Citrix License Server for Windows and VPX that could allow an unauthenticated attacker to bypass authentication and allow a malicious website to read or modify license server data of an existing...

PXEChecker for Citrix Provisioning Services

Description PXEChecker is tool designed to troubleshoot configuration and environment related issues during the PXE boot process in Citrix Provisioning Services PVS. PXEChecker has two different tests: 1. Legacy BIOS Test.- Simulates the PXE boot process and analyzes the DHCP options on the DHCP...

Failed to launch session "session_name". Error code: 2524 on Citrix Workspace App During App/Desktop Launch

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error code is returned by the Citrix Gateway to CWA appwhen application/desktop launch...

How Do I Load Balance FTPS Servers on a NetScaler ADC

This article describes how to load balance FTPS servers on a NetScaler ADC...

CVE-2016-5433 - TLS Certificate Validation Vulnerability in Citrix iOS Receiver

Description of Problem A vulnerability has been identified in Citrix iOS Receiver that could result in TLS certificates being incorrectly validated. This vulnerability has been assigned the following CVE number: CVE-2016-5433: TLS Certificate Validation Vulnerability in Citrix iOS Receiver. This...

Error: "License server is not connected" in Citrix Director

On the Director site, if you scroll down to check the connectivity of the CitrixLicense server to each of thecontrollers, it shows up as "License server is not connected"...

NetScaler RDP proxy -14.1- How to configure RDP proxy with RDS server

This article explains how to configure an RDP Proxy Gateway with an RDS server. Key Points to Note: -If you are using an RDS server, you will need an RDP server profile where the RDP IP is set as the RDS server IP. -For the RDP Host, enter the FQDN of the Gateway Virtual Server. This is required...

How to Enable Logging for Citrix Director

This article contains information about logging for Citrix Director. To learn about Citrix Director, please visit Citrix Documentation -Director...

How to generate a support file of an ADM Agent CLI and GUI.

Describe how to generate a support file of anon-Prem ADM Agent from CLI or GUI...

Adding ADC instance on ADM failed with error - Added unlicensed * that requires HTTPS connection

Adding NetScaler instance on ADM failed with error - Added unlicensed that requires HTTPS connection...

Joining Storefront to Server Group Error "Cannot Join Server Group"

Error when trying to add second SF server to existing group: "Cannot join server group There was a problem connecting to the authorizing server. Verify the server name and try again." Joining Storefront Server will show the following Event under "Citrix Delivery Services Logs " Log Name: Citrix...

How to Check Citrix Maintenance Program Expiration Dates

This article provides instructions on how to check the current expiration date of Subscription Advantage, Customer Success Services CSS, Appliance Maintenance, and Hardware Warranty memberships on Citrix product by using the My Account web portal. Background Customers can locate a list of license...

Error "Access is Denied" When Launching Published Applications or Desktops

Unable to launch published Desktop or apps. Error: Access denied Following event logs can be seeing on the VDAs: Source: Citrix Desktop Service Event ID: 1050 Message: Connection validation failed on domain domain.local for user username for reason "Unlicensed" Studio reports all licenses being...

CVE-2017-14602 - Authentication Bypass Vulnerability in Citrix NetScaler ADC and NetScaler Gateway Management Interface

Description of Problem A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway that, if exploited, could allow an attacker with access to the NetScaler management interface to gain administrative access to the...

CVE-2017-7219 - Heap Overflow Vulnerability in Citrix NetScaler Gateway Could Result in Arbitrary Code Execution

Description of Problem A heap overflow vulnerability has been identified in Citrix NetScaler Gateway that could allow a remote, authenticated user to execute arbitrary commands on the NetScaler Gateway appliance as a root user. The following vulnerability has been addressed: CVE-2017-7219 High:...

CVE-2016-5109 - Authentication bypass vulnerability in Citrix Worx Home for iOS and Citrix MDX Toolkit for iOS

Description of Problem A vulnerability has been identified that affects iOS applications using the XenMobile MDX Toolkit. An attacker with physical access to the device could bypass in-application Apple Touch ID authentication in some cases where re-authentication is required. This vulnerability...

CVE-2014-4700 - Vulnerability in Citrix XenDesktop could result in unauthorized access to another user's desktop

Description of Problem A vulnerability has been identified in Citrix XenDesktop that could result in a user gaining unauthorized interactive access to another user’s desktop. This vulnerability affects a specific, non-default configuration of Citrix XenDesktop 7 all versions up to and including...

NetScaler Error: "Unable to complete System File Update request" while saving custom portal theme

On the NetScaler GUI getting the error "Unable to complete System File Update request" while editing and saving the portal theme...

Director: Dashboard not showing correct session count data

Director dashboard showing wrong data Session count in Studio and Director Dashboard is incorrect...

Citrix Endpoint Management (aka XenMobile Server) 10.16.0 Rolling Patch 3

Package name: xms10.16.0.10318.bin For: XenMobile Server 10.16.0 Deployment type: On-premises only Replaces: xms10.16.0.10205.bin, xms10.16.0.10108.bin Date: August 2024 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this a...

"The network logon service was not started" when logging onto PVS Target Device via Console

When logon PVS Target Device TD via console, it throws below error: "An attempt was made to logon but the network logon service was not started." TD VDI is unregistered status in Citrix Studio...

Understanding Write Cache in Provisioning Services Server

This article provides information about write cache usage in a Citrix Provisioning, formerly Provisioning Services PVS, Server. Write Cache in Provisioning Services Server In PVS, the term “write cache” is used to describe all the cache modes. The write cache includes data written by the target...

Citrix SDWAN Center Security Update

Description of Problem Multiple vulnerabilities have been discovered in Citrix SD-WAN Center that, if exploited, could allow an unauthenticated attacker with network access to SD-WAN Center to perform arbitrary code execution as root. These vulnerabilities have the following identifiers: CVE|...

How to reset Receiver or Citrix Workspace App using the command line

Sometimes it may needto reset Citrix Receiver or Citrix Workspace App to restore the default settings.This article explains how to reset Receiver using the command line...

CVE-2019-17366 - Citrix Application Delivery Management (ADM) Console Security Update

Description of Problem An authorisation bypass vulnerability was discovered in the Citrix Application Delivery Management ADM server. The vulnerability allows a Citrix ADM user with read-only privilege to access a managed instances with admin level permissions. The following deployment scenarios...

Thinwire+ Support for H.264 Build-To-Lossless for transient content.

Introduction One of the features of Thinwire+ is “build to lossless” for transient content. This means that content such as3D or other moving imageryis initially displayed at low quality to improve frame rates and overall interactivity. Once user input has stopped, transient images are gradually...

Unable to Delete Resources: There is currently an active background action

When attempting to delete hosting infrastructure either a Connection or Resources fromCitrix Studio, the following message appears: "Resources "Local storage" cannot be deleted because they are being used by the following Machine Catalogs and/or background actions:..." Background To avoid...

ADC-13.1-Rate limit gets hit unexpectedly when a rate limit identifier is used in different policies

When we invoke one rate limit identifier from different polices, the rate limit gets hit unexpectedly. The example config is as below: add stream selector IPURLSelector HTTP.REQ.URL CLIENT.IP.SRCadd ns limitIdentifier LIMITIPURL -threshold 3 -selectorName IPURLSelectoradd audit messageaction...

NetScaler Gateway-13.1-Launching ICA session got stuck with client authentication enabled

You may stuck at the ICA session launching process when you enable client authentication in Gateway virtual server...

Resetting SDX Xenserver password if Xenserver is 7.1 and above with xe-serial option

If we have to reset SDX Xenserver password and if we do not have LOM access. we use the Xe-Serial option as mentioned below...

uberAgent - CVAD Site not visible in Splunk

Splunk dashboard CVAD/DaaS Applications & Desktops does not display CVAD Site on the list. There is no issue with data upload from agent to Splunk as other DDC metrics are available. uberAgent.log file located in C:\Windows\Temp on the Delivery Controller shows the error if you search for:...

How to Find Maximum Size of IP Data Payload that can Traverse WAN Environment Without Fragmentation

Citrix SD-WAN, formerly NetScaler SD-WAN This article describes how to find out the maximum size of IP data payload that can traverse a WAN environment without fragmentation. Background The CloudBridge acceleration parameters are sent through TCP options, which use the space in the IP data payloa...

Disable Restart Button While Desktops are Restarting

This article describes how to configure the StoreFront to ignore clicks on “Restart” while desktop is powering off and while it is powering on again. Background When the user’s desktop is restarting, there might be issues if they repeatedly click on the desktop...

Hotfix Rollup Pack 1 for XenApp 5 2008 - Features and Enhancements List

This article describes Hotfix Rollup Pack 1 for Citrix XenApp 5 for Microsoft Windows Server 2008. Hotfix Rollup Pack 1 is cumulative - it can be installed on top of the XenApp 5 for Windows Server 2008 base product, on top of the first Feature Pack, Feature Pack 2, or Feature Pack 3. HRP01...

Citrix uberAgent Security Bulletin for CVE-2024-6677

Description of Problem A vulnerability has been discovered in Citrix uberAgent, which, if exploited, may result in the escalation of privileges of the attacker. Affected Versions: The following supported versions of Citrix uberAgent are affected by the vulnerability: Citrix uberAgent before 7.2.1...

CVE-2016-5302 - Citrix XenServer Security Update

Description of Problem A security vulnerability has been identified in XenServer 7.0 that may allow an attacker on the management network who is in possession of Active Directory credentials for an AD account that is not authorised to manage a XenServer host to compromise that host. The following...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368

Severity - Critical Description of Problem Vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler ADC and NetScaler Gateway are...

Published Desktop Randomly Disconnects with Event ID 1 - ICA Client (Vanadium)

Users running on thin clients using the maximum supported monitors for the device, each at at the maximum supported resolution, may be disconnect from the Published Desktop at random.At the time of the disconnect the endpoint device event log records: Event ID 1 from source ICA Client Vanadium wi...

Purpose of CMSTART command

This article provides information about the command CMSTART. Purpose of CMSTART command Cmstart.exe is a process that runs when you log on to the XenApp server. It is called by winlogon. It is associated with Wfshell.exe, CltMgr.exe, and Icast.exe files. The cmstart is controlled by the following...

LACP Bonding in XenServer - Configuration and Troubleshooting

In XenServer 6.1, LACP link aggregation was added to existing bonding modes for vSwitch. This article describes dynamic link aggregation LACP between a XenServer host and a switch, giving a high-level overview of the 802.3ad protocol, explaining configuration and diagnosis tools. Background LACP...

How to Factory Reset SDWAN 210-LTE without management access

Factory Reset 210 appliance when management access is not available...

How to Sysprep PVS images before they are streamed to Target Devices.

Question: Is needed to run Sysprep on PVS images? Answer: It is not needed to run Sysprep on PVS/MCS images since they both have their own version/method built-in to Sysprep the images. Also, it is not recommended to run Sysprep on PVS or MCS machines since it is not needed...

Netscaler-13.1-Security scanner reported "Cacheable SSL Page Found" for gateway virtual server

Security scanner reported "Cacheable SSL Page Found" for gateway virtual server. The detailed content reported by the scanner is as below: ------------------------------ The application has responded with a response that indicates the page should be cached, but cache controls aren't set you can...