Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities
Source SecurityWeek
Mentioned vulnerabilities
Fixed in 5.0.8.1 : patch affected systems soon.
Data as of 11 Nov 2026, 13:48 UTC
Rated High by SecurityWeek
- Patch
- Available – fixed in 5.0.8.1
What to do
AI-suggested
Patches have been released by Citrix and Ivanti for all identified vulnerabilities. Users should apply Ivanti Cloud Services Application patch version 5.0.8.1, Endpoint Manager 2024 SU8, Endpoint Manager Mobile updates, and Citrix XenServer updates promptly. Ivanti notes that deployments using Dual NIC configurations are not externally exploitable for the CSA vulnerability. No additional mitigation steps are indicated beyond applying the official patches.
Description
Citrix and Ivanti have released patches for multiple critical and high-severity vulnerabilities affecting several of their products. These vulnerabilities include remote code execution, SQL injection, and certificate tampering flaws that could allow attackers to compromise hosts or escalate privileges. Ivanti's critical issues affect Cloud Services Application and Endpoint Manager, while Citrix's XenServer vulnerabilities could lead to host compromise or privilege escalation. No evidence of exploitation in the wild has been reported.