Citrix NetScaler Console Security Bulletin for CVE-2026-120869

Severity - Critical Description of Problem A vulnerability has been discovered in Citrix NetScaler Console. Refer below for further details. Affected Versions The following supported versions of Citrix NetScaler Console are affected by the vulnerabilities: Citrix NetScaler Console14.1BEFORE...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin

Severity - Critical Description of Problem Multiple vulnerabilities have been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of Citrix NetScaler ADC an...

Citrix Secure Access Client for Linux Security Bulletin for CVE-2026-118269

Severity - High Description of Problem A vulnerability has been discovered in the Citrix Secure Access Client for Linux. Refer to the information below for further details: Affected Versions The following supported versions of Citrix Secure Access Client for Linux are affected by the vulnerabilit...

Citrix Secure Access Client for Windows Security Bulletin for CVE-2026-118268

Severity - High Description of Problem A vulnerability has been discovered in the Citrix Secure Access Client for Windows. Refer to the information below for further details: Affected Versions The following supported versions of Citrix Secure Access Client for Windows are affected by the...

XenServer Security Update for Multiple Issues

Severity : High Description of Problem An issue has been identified that may allow an unauthenticated attacker on the management network to eventually infer the Pool Secret and so compromise the host. This issue has the following identifier: CVE-2026-102705 Several further issues have been...

XenServer Security Update for Multiple Issues

Severity: Critical Description of Problem An issue has been identified that may allow an unauthenticated attacker on the management network to compromise the hostand/or any running Workload Balancing WLB or Conversion Manager appliances. This issue has the following identifier: CVE-2026-98432 A...

Citrix Security Advisory for CVE-2026-111497 Impact on Unicon eLux Scout

Unicon eLux Scout is impacted by the following vulnerability - CVE-2026-111497 - Google Brotli Unchecked Return Value Vulnerability The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems...

XenServer Security Update for CVE-2026-114406

Severity: High Description of Problem XenServer's internal list of trusted certificate authorities CAsincluded apublic CA whose intermediate certificateshave been found to haveweak keys. This would allow a malicious attacker on the management network to forge TLScertificatesthat appeared to be...

Citrix Security Advisory for CVE-2026-109618 and CVE-2026-109619

Cloud Software Group is aware of the following vulnerabilities affecting PHP RCE via OOM corruption, CVE-2026-109618 RCE via stale global state, CVE-2026-109619 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or m...

XenServer Security Update for CVE-2026-79610, CVE-2026-79610, CVE-2026-102700 and CVE-2026-102701

Severity : High Description of Problem Several issues have been identified that affect XenServer 8.4 and XenServer 9. Three of these issues may allow a malicious privileged user in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2026-79610...

Citrix UniconOS Security Bulletin CVE-2026-53562, CVE-2026-53563, and CVE-2026-53564

Severity - High Description of Problem Vulnerabilities have been discovered in Citrix UniconOS formerly eLux. Refer to the information below for further details. Affected Versions: The vulnerabilities affect the following supported versions of Citrix UniconOS formerly eLux. Current Release CR...

Citrix Workspace App for Windows Security Bulletin CVE-2026-84419 and CVE-2026-84420

Severity - Medium Description of Problem Vulnerabilities have been discovered in the Citrix Workspace app for Windows. Refer to the information below for further details. Affected Versions: CVE-2026-84419 - The following supported versions of the Citrix Workspace app for Windows are impacted by...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406

Severity - Critical Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of Citrix NetScaler ADC and Citrix...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779

Severity - High Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler are affected by the...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, and CVE-2026-88778

Severity - Critical Description of Problem Multiple vulnerabilities have been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of Citrix NetScaler ADC a...

Citrix Workspace app for Windows Security Bulletin CVE-2026-78546 and CVE-2026-78547

Severity - Medium Description of Problem Two vulnerabilities have been discovered that impact the Citrix Workspace app for Windows. Affected Versions The vulnerabilities affect the following supported versions of the Citrix Workspace app for Windows. Current Release CR Citrix Workspace app for...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490

Multiple vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or...

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems. Cloud Software Group, Inc. and its subsidiaries collectively, "Clou...

XenServer Security Update for Multiple Issues

Severity :High Description of Problem Several issueshave beenidentifiedthat affect XenServer 8.4 and XenServer 9. Collectively, these issues may allowa malicious privileged userin a guest VM to compromise or crash the host. Theseissueshavethe following identifiers: CVE-2026-42492XenServer 9 only...

XenServer Security Update for CVE-2026-42491

Severity: Medium Description of Problem An issue has been identified in the XenServer management API SDK that may allow an attacker on the management network who is able to intercept specific HTTPS requests within a higher-level operation to be able to act with the privileges of the intercepted...

Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows Security Bulletin for CVE-2026-53565 and CVE-2026-53566

Severity - High Description of Problem Vulnerabilities have been discovered in the Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client. Refer to the information below for further details: Affected Versions: The following supported versions of Citrix Secure Access Client fo...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474

Severity - High Description of Problem Multiple vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler ADC and NetScaler Gateway are...

XenServer Security Update for Multiple Issues

Severity: High Description of Problem Several issues have been identified that affect XenServer 8.4. These are: An issue that may, in some circumstances, allow a malicious privileged user in a guest VM to compromise the host. This issue has the following identifier: CVE-2026-23558 An issue that m...

XenServer Security Update for CVE-2026-4397

Severity: Medium Description of Problem An issue has been identified in XenServer 8.4 which, when starting a VM on a host with limited available memory, may allow a privileged user in that newly starting VM to access memory data of a previously terminated VM. This issue has the following...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-3055 and CVE-2026-4368

Severity - Critical Description of Problem Vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler ADC and NetScaler Gateway are...

XenServer Security Update for CVE-2026-23554

Severity: High Description of Problem An issue has been identified in XenServer 8.4 that may allow privileged code in a guest VM to compromise the host. This issue has the following identifier: CVE-2026-23554 Affected Versions This issue affects XenServer 8.4. Note that XenServer 9.0 is in Public...

XenServer Security Update for CVE-2025-58151 and CVE-2026-23553

Severity:Medium Description of Problem An issue has been identified in XenServer 8.4 that may allow privileged code in a guest VM to cause the host to become slow or unresponsive to management operations. This issue has the following identifier: CVE-2025-58151 A further issue has been identified ...

XenServer Security Update for CVE-2025-62626

Severity: Medium Description of Problem A hardware issue has been identified in AMD Zen 5 CPU devices that may cause those CPUs to return a value of zero more frequently than statistically expected when asked to generate a random value. This may compromise e.g. cryptographic keys that are generat...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-12101

Severity - Medium Description of Problem A vulnerability has been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affected ...

XenServer Security Update for CVE-2025-58147 and CVE-2025-58148

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-58147 CVE-2025-58148 Affected Versions These issues affect XenServer 8.4...

XenServer Security Update for CVE-2025-27466, CVE-2025-58142, CVE-2025-58143 and CVE-2025-58146

Severity: High Description of Problem Several issues have been identified in XenServer 8.4 that collectively may allow privileged code in a guest VM to compromise or crash the host. These issues have the following identifiers: CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 CVE-2025-58146 Affected...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-7775, CVE-2025-7776 and CVE-2025-8424

Severity - Critical Description of Problem Multiple vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway a...

XenServer Security Update for CVE-2024-36350 and CVE-2024-36357

Severity: Medium Description of Problem AMD has disclosed several security issues affecting AMD CPUs. These CPU hardware issues may allow code in a guest VM to infer some active memory content of another VM that is running on the same host. Although these are not vulnerabilities in the XenServer...

Windows Virtual Delivery Agent for CVAD and Citrix DaaS Security Bulletin CVE-2025-6759

Severity - High Description of Problem A vulnerability has been identified that impacts Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS. Affected Versions: The vulnerability affects the following supported versions of Windows Virtual Delivery Agent for...

XenServer Security Update for CVE-2025-27465

Severity: Medium Description of Problem An issue has been identified in XenServer 8.4 that may allow privileged code in a guest VM to cause the host to crash or become unresponsive. This issue has the following identifier: CVE-2025-27465 Affected Versions This issue affects XenServer 8.4. Note th...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-6543

Severity - Critical Description of Problem A vulnerability has been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affecte...

Citrix Workspace app for Windows Security Bulletin CVE-2025-4879

Severity - High Description of Problem A vulnerability has been discovered that impacts the Citrix Workspace app for Windows. Affected Versions The vulnerability affects the following supported versions of the Citrix Workspace app for Windows Current Release CR Citrix Workspace app for Windows...

Citrix Secure Access Client for Windows Security Bulletin for CVE-2025-0320

Severity - High Description of Problem A vulnerability has been discovered in the Citrix Secure Access Client for Windows. Refer to below for further details: Affected Versions The following supported versions of Citrix Secure Access Client for Windows are affected: Citrix Secure Access Client fo...

NetScaler Console and NetScaler SDX (SVM) Security Bulletin for CVE-2025-4365

Severity - Medium Description of Problem A vulnerability has been discovered in NetScaler Console formerly NetScaler ADM and NetScaler SDX SVM . Refer to below for further details: Affected Versions The following supported versions of NetScaler Console are affected: NetScaler Console 14.1 BEFORE...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-5349 and CVE-2025-5777

Severity - Critical Description of Problem A vulnerability has been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affecte...

Citrix Workspace app for Windows Security Bulletin CVE-2024-6286

Description of Problem A vulnerability has been discovered that impacts the Citrix Workspace app for Windows. Refer to below for further details: Affected Versions The vulnerability affects the following supported versions of the Citrix Workspace app for Windows Current Release CR Citrix Workspac...

Linux VDA login fail

The newly installed LVDA encountered a login failure. When launching the virtual desktop, the Linux login screen appears, but even after manually entering the correct username and password, the system fails to authenticate and proceed to the desktop environment...

Slow initial page load when connecting to Storefront after upgrading to 2411/2503

After installing StoreFront 2411/2503, connections made to the landing page for a Storefront Store i.e. https://example.com/Citrix/XenAppWeb, users experience a 6 second delay before the logon page fully loads...

Newly published App-V applications are not visible to end users

After most recent upgrade of Web Studio users are not able to see newly published App-V packages/applications. This issue affects only newly published App-V applications...

Citrix Monitor: user logon time is really high due authentication time

When checking Citrix Director or DaaS Monitoring, on user's Logon Performance, we can see that the Average Logon Duration is high Checking in individual user's logon, Authentication time is really high for some users, what increases the average time...

NetScaler-13.1-Warning "is_whitelisted_request - Dropping invalid http request" in ns.log

You may see warning message like below in ns.log and would like to know why this log exists. Aug 12 16:50:25 X.X.X.X 08/12/2024:07:50:25 GMT XXX 0-PPE-2 : default SSLVPN Message 918225 0 :"iswhitelistedrequest - Dropping invalid http request:|/v1|"...

Netscaler-13.1-Security scanner reported "Cacheable SSL Page Found" for gateway virtual server

Security scanner reported "Cacheable SSL Page Found" for gateway virtual server. The detailed content reported by the scanner is as below: ------------------------------ The application has responded with a response that indicates the page should be cached, but cache controls aren't set you can...

NetScaler-13.1-How to limit the IP subnets to access LB vServer with responder policy in NetScaler?

How to allow only specified IP subnets to access LB virtual server with responder policy in NetScaler?...

ADC-The hostname of Citrix ADC instance is not displayed in ADM

When we add ADC into ADM, the page of adding ADC to ADM may stuck at "Trying to connect XXX". If we open a new page to check ,we may notice that ADC is added to ADM , but the hostname is not displayed. And we may found the masinventory process is not running as no output is displayed for the...

NetScaler-13.1-Mastool version in Secondary node is showed as 0.0-0.0

Mastool version in Secondary node is showed as 0.0-0.0. The command to check mastool version in NetScaler is as below. shellcat /var/mastools/version.txt 0.0-0.0...