Citrix and Ivanti patch 19 vulnerabilities
Nov 11, 2026 · Summarized by Fundy Tech from SecurityWeek
Citrix and Ivanti fixed 19 flaws, including critical bugs that could enable remote code execution and certificate tampering. Both companies say they have no evidence of exploitation in the wild.
Key points
- Ivanti patched 13 vulnerabilities across five products.
- Citrix fixed six flaws in XenServer.
- One Ivanti flaw could allow unauthenticated remote code execution.
- Citrix says a XenServer bug could let attackers infer the Pool Secret.
Why it matters
Businesses using Citrix or Ivanti products should check their update status now. These flaws could let attackers take control of systems or compromise hosts. For small businesses, that can mean service disruption, data exposure or loss of trust. Keeping remote access and server software current lowers the chance of a break-in.
Who’s affected: Citrix and Ivanti product users
What to do
- Patch Citrix and Ivanti products as soon as possible.
- Review exposed admin interfaces and restrict access.
- Confirm the specific versions in use across your network.
Vulnerability IDs
Original reporting
Not sure if this affects you?
Fundy Tech helps businesses and households across Atlantic Canada stay patched, protected and up to speed. Tell us what you’re running and we’ll tell you straight whether you need to act.