[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKDUwHzpvuv1wR7YKS9gbOPnY_XdU6xp2ULJVxpYOvLI":3},{"article":4,"iocs":44,"watch_terms":58,"solutions":59,"lesson":122},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"4f0b4b22-75bd-43cd-8c19-1253ab25172a","Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities","citrix-ivanti-patch-critical-and-high-severity-vulnerabilities-84cdfa","Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts. The post Citrix, Ivanti Patch Critical and High-Severity Vulnerabilities appeared first on SecurityWeek.","Citrix and Ivanti have released patches for a total of 19 vulnerabilities across their product lines. Ivanti addressed 13 flaws in five products, including two critical-severity issues in Cloud Services Application (CSA) and Endpoint Manager (EPM) that could lead to remote code execution. Citrix fixed six vulnerabilities in XenServer, including a high-severity bug that could allow attackers to compromise hosts, and also released updates to mitigate several AMD CPU vulnerabilities.","Citrix and Ivanti release patches for 19 vulnerabilities, including critical and high-severity flaws.","https:\u002F\u002Fwww.securityweek.com\u002Fcitrix-ivanti-patch-critical-and-high-severity-vulnerabilities\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F08\u002FCitrix-vulnerability.jpeg","2026-11-11T13:37:19+00:00","2026-11-11T14:00:14.89814+00:00",8,[17,20,22,25,27,29],{"name":18,"type":19},"Citrix","vendor",{"name":21,"type":19},"Ivanti",{"name":23,"type":24},"Cloud Services Application (CSA)","product",{"name":26,"type":24},"Endpoint Manager (EPM)",{"name":28,"type":24},"Sentry",{"name":30,"type":24},"XenServer","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,39],{"category":38},{"id":31,"icon":33,"name":34,"slug":35},{"category":40},{"id":41,"icon":33,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45,49,52,55],{"type":46,"value":47,"context":48},"cve","CVE-2026-121683","Critical-severity flaw in Ivanti Cloud Services Application (CSA)",{"type":46,"value":50,"context":51},"CVE-2026-121653","Critical-severity SQL injection bug in Ivanti Endpoint Manager (EPM)",{"type":46,"value":53,"context":54},"CVE-2026-105425","High-severity remote code execution flaw in Ivanti Sentry",{"type":46,"value":56,"context":57},"CVE-2026-102705","High-severity bug in Citrix XenServer allowing host compromise",[18,21,23],{"controls":60,"vendors":114},[61,90],{"slug":62,"name":63,"problem":64,"products":65},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[66,74,82],{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":83,"vendor_name":84,"vendor_logo":85,"product_slug":86,"product_name":87,"url":88,"description":89},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":91,"name":92,"problem":93,"products":94},"patch-management","Automated patch management","Known holes get closed in days, not months.",[95,102,106],{"vendor_slug":96,"vendor_name":21,"vendor_logo":97,"product_slug":98,"product_name":99,"url":100,"description":101},"ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":91,"product_name":103,"url":104,"description":105},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",[115,120],{"slug":116,"name":18,"logo_path":117,"roles":118},"citrix","\u002Fvendor-logos\u002Fcitrix.png",[119],"affected",{"slug":96,"name":21,"logo_path":97,"roles":121},[119],{"slug":123,"title":124,"body":125,"framework_refs":126,"framework_notes":132},"critical-citrix-and-ivanti-flaws-demand-immediate-patching","Critical Citrix and Ivanti Flaws Demand Immediate Patching","Citrix and Ivanti disclosed 19 vulnerabilities across multiple enterprise products, including two critical flaws in Ivanti's Cloud Services Application and Endpoint Manager that enable remote code execution by unauthenticated attackers. These products are widely deployed in enterprise environments, making them high-value targets for threat actors who routinely scan for unpatched systems within hours of disclosure. The sheer volume of vulnerabilities — spread across five Ivanti products alone — highlights how complex, multi-product vendor ecosystems expand an organization's attack surface. Delays in applying these patches can result in full host compromise, as seen repeatedly with prior Ivanti and Citrix vulnerabilities exploited in the wild. Organizations must treat patches for remote code execution flaws in internet-facing or management-plane products as emergency-priority updates.",[127,128,129,130,131],"CIS Control 7: Continuous Vulnerability Management (v8)","CIS Control 2: Inventory and Control of Software Assets (v8)","NIST SP 800-53 SI-2: Flaw Remediation","NIST CSF 2.0 ID.RA-1: Asset Vulnerabilities Are Identified and Documented","NIS2 Article 21(2)(e)",{"NIS2 Article 21(2)(e)":133,"NIST SP 800-53 SI-2: Flaw Remediation":134,"CIS Control 7: Continuous Vulnerability Management (v8)":135,"CIS Control 2: Inventory and Control of Software Assets (v8)":136,"NIST CSF 2.0 ID.RA-1: Asset Vulnerabilities Are Identified and Documented":137},"NIS2 Article 21(2)(e) explicitly requires vulnerability handling and disclosure practices in acquisition and maintenance, obligating covered entities to have processes for rapidly acting on vendor-released patches for critical flaws.","SI-2 mandates that organizations identify, report, and correct information system flaws, establishing the timely patch application process that would have mitigated these critical vulnerabilities.","CIS Control 7 requires organizations to continuously assess and remediate vulnerabilities, which would have ensured these 19 flaws were identified and prioritized for patching promptly after disclosure.","An accurate software asset inventory is required to know which systems run Ivanti CSA, EPM, or Citrix XenServer, enabling rapid identification of affected hosts when patches are released.","This category requires maintaining awareness of vulnerabilities affecting organizational assets, which is the foundation for responding quickly to multi-product disclosures like this one."]