CyberNew CyberNew
Cyber News SecurityWeek 2 days ago

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

CN
CyberNew Threat Research Desk
• Original Reporting: SecurityWeek
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Cloud & Distributed Infrastructure
Intelligence Sector
Cyber News

Analyst Takeaway

"Security updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs. Citrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS. Successful exploitation of the flaws could allow attackers to execute arbitrary code, cause..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
Ivanti Fortinet Citrix Splunk Atlassian Nvidia Adobe vulnerability patches

Security updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs.

Citrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS.

Successful exploitation of the flaws could allow attackers to execute arbitrary code, cause denial-of-service (DoS) conditions, leak information, compromise or crash the host from within the VM, elevate privileges, execute arbitrary commands, and read arbitrary files.

Fortinet released 10 advisories dealing with 13 bugs, including two critical-severity issues in FortiSIEM and FortiSandbox GUI that could allow unauthenticated attackers to execute arbitrary code (CVE-2026-106173) and bypass authentication (CVE-2026-107656).

It also resolved four high-severity SQL injection vulnerabilities in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud, and another in FortiMail webmail. All five could allow authenticated attackers to execute arbitrary code or commands.

Ivanti rolled out patches for seven security defects in Connect Secure, Neurons Patch for Intune, and Xtraction.

Advertisement. Scroll to continue reading.

Written By Ionut Arghire

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from SecurityWeek.

Primary Advisory →