Citrix and Ivanti patch critical flaws in remote-access products

Citrix and Ivanti announced patches Tuesday for 19 vulnerabilities across their enterprise remote-access infrastructure, including critical- and high-severity flaws. Ivanti fixed 13 vulnerabilities across five products, while Citrix addressed six XenServer security defects. Cloud Services Application and Endpoint Manager held Ivanti’s critical-severity defects.

The Cloud Services Application flaw tracked as CVE-2026-121683 scores 9.4 on CVSS and is a missing-authentication issue. Attackers without authentication can remotely change trusted EPM Core certificate entries through this flaw. CSA version 5.0.8.1 patches the bug, and Ivanti notes that Dual NIC configuration deployments cannot be exploited externally for the CSA flaw.

The critical Endpoint Manager issue tracked as CVE-2026-121653 scores 9.8 on CVSS. This is an SQL injection bug, which lets attackers manipulate databases, enabling remote code execution without authentication. EPM version 2024 SU8 resolves the issue. The same update fixes a medium-severity issue involving cleartext transmission of sensitive information that man-in-the-middle attacks can exploit.

Ivanti patched four Sentry vulnerabilities Tuesday, including one high-severity remote code execution flaw tracked as CVE-2026-105425. The CVE-2026-105425 fix also appeared in Endpoint Manager Mobile alongside five medium-severity issues. Ivanti also fixed a medium-severity User Workspace Manager defect. The vendor reports no evidence that attackers have exploited these vulnerabilities in the wild.

Citrix issued XenServer updates for CVE-2026-102705, a high-severity bug. The flaw could allow attackers to infer the Pool Secret and compromise the host. The remaining five XenServer issues could lead to privilege escalation or let administrators with any role end running tasks of other roles. Citrix also issued updates for AMD CPU vulnerabilities that could let one guest VM compromise the host or access another VM’s active memory content.

Ivanti patched two critical Sentry vulnerabilities on June 10, 2026, and fixes landed in versions R10.5.2, R10.6.2 and R10.7.1. One flaw, CVE-2026-10520, is a critical-severity OS command injection issue, meaning attackers can run commands on the underlying system, and it lets remote attackers execute code as root. The other, CVE-2026-10523, is a critical authentication bypass letting remote unauthenticated attackers create rogue administrative accounts. Ivanti reported no evidence of wild exploitation for the two Sentry vulnerabilities, saying, “We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure.”

Ivanti Sentry works as a security gateway. It acts as a gatekeeper between mobile devices outside the corporate network and internal systems. Sentry is reachable from the internet and is often deployed on an isolated subnetwork. Attackers who compromise Sentry can expose credentials and session tokens and impersonate legitimate users to reach apps and e-mail servers.

WatchTowr researchers traced CVE-2026-10520 to an API meant for internal configuration commands. The API takes commands from anyone on the internet without requiring authentication first. Security researchers released technical details about CVE-2026-10520, and those details may help attackers build a working exploit. WatchTowr researchers released a script defenders can use to determine whether their environment is vulnerable.

Shadowserver Foundation saw many exploitation attempts against Ivanti Sentry CVE-2026-10520 linked to a public watchTowr proof of concept on June 11, 2026. Shadowserver saw 19 vulnerable instances, and at least two had backdoors. Shadowserver says all remaining likely compromised too.

Cybercriminals frequently target Ivanti vulnerabilities because they provide an initial-access route into enterprise networks for stealing sensitive corporate and customer data. CISA told U.S. federal agencies in May to patch Ivanti devices after an Ivanti warning about a high-severity Endpoint Manager Mobile zero-day remote code execution flaw. Government agencies worldwide have had Ivanti zero-days exploited against them in recent years. Ivanti fixed two other critical Endpoint Manager Mobile vulnerabilities in January after zero-day exploits hit a limited number of customers.

Over the past several years, CISA marked 34 Ivanti product vulnerabilities as actively exploited, and twelve of the 34 were also used in ransomware attacks. Over 40,000 clients worldwide use Ivanti IT asset management solutions, supported by a network of over 7,000 partners and over 3,000 employees. Ivanti has shipped fixes for two high-severity Ivanti Endpoint Manager Mobile vulnerabilities.

EPM version 2024 SU8 resolves CVE-2026-121653, and CSA version 5.0.8.1 patches CVE-2026-121683. Fixes for CVE-2026-10520 and CVE-2026-10523 appear in Ivanti Sentry versions 10.5.2, 10.6.2 and 10.7.1. Vulnerable Ivanti Sentry versions include 10.5.1, 10.6.1 and 10.7.0 and prior for CVE-2026-10520 and CVE-2026-10523.

CVE-2023-38035 is an authentication bypass bug. Attackers exploited CVE-2023-38035 as a zero-day in 2023.