cyber.hendryadrian.com
Vulnerability & Exploit · securityweek.com

Citrix, Fortinet and Ivanti Patch 29 Vulnerabilities, Including an Exploited Zero-Day

· Original article ↗

Summary

Citrix, Fortinet and Ivanti released updates addressing 29 vulnerabilities across their products, including critical flaws and an exploited Ivanti Connect Secure zero-day.

Key points

  • Citrix issued advisories for nine vulnerabilities affecting Workspace App for Windows, XenServer 8.4 and 9, and UniconOS.
  • The Citrix flaws could enable code execution, denial of service, information disclosure, privilege escalation, and other impacts.
  • Fortinet addressed 13 vulnerabilities, including critical FortiSIEM and FortiSandbox GUI flaws that could allow unauthenticated code execution or authentication bypass.
  • Fortinet also fixed five high-severity SQL injection vulnerabilities across FortiAnalyzer, FortiManager, and FortiMail products.
  • Ivanti patched seven flaws across Connect Secure, Neurons Patch for Intune, and Xtraction.
  • The Ivanti Connect Secure update fixes an exploited zero-day involving two chained bugs; other critical Ivanti flaws could expose authentication information or EPMM connector credentials.

Article Details

Vulnerability Types
  • Arbitrary code execution
  • Denial of service
  • Information disclosure
  • Host compromise or crash from within a VM
  • Privilege escalation
  • Arbitrary command execution
  • Arbitrary file read
  • Authentication bypass
  • SQL injection
  • Request redirection
Severity
Critical and high
Exploitation Status
active
Exploit Availability
unknown
Patch Status
available

CVE

CVE-2026-104935The Connect Secure update deserves special attention, as it resolves CVE-2026-104935, an exploited zero-day that covers two underlying bugs chained together to compromise patched VPNs.CVE-2026-106042The Xtraction update fixes five issues, including a critical bug (CVE-2026-106042) that could allow attackers to redirect application-generated requests and capture EPMM connector credentials.CVE-2026-106173FortiSIEM and FortiSandbox GUI that could allow unauthenticated attackers to execute arbitrary code (CVE-2026-106173) and bypass authentication (CVE-2026-107656).CVE-2026-107656unauthenticated attackers to execute arbitrary code (CVE-2026-106173) and bypass authentication (CVE-2026-107656).CVE-2026-109412In Neurons Patch for Intune, Ivanti resolved CVE-2026-109412, a critical flaw that could allow attackers to leak sensitive authentication information.

Vendors

CitrixSecurity updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs.FortinetSecurity updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs.IvantiSecurity updates released on Tuesday resolve 29 vulnerabilities across Citrix, Fortinet, and Ivanti products, including multiple critical-severity bugs.

Products

Connect SecureIvanti rolled out patches for seven security defects in Connect Secure, Neurons Patch for Intune, and Xtraction.EPMMThe Xtraction update fixes five issues, including a critical bug (CVE-2026-106042) that could allow attackers to redirect application-generated requests and capture EPMM connector credentials.FortiAnalyzerIt also resolved four high-severity SQL injection vulnerabilities in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud, and another in FortiMail webmail.FortiAnalyzer CloudIt also resolved four high-severity SQL injection vulnerabilities in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud, and another in FortiMail webmail.FortiMailIt also resolved four high-severity SQL injection vulnerabilities in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud, and another in FortiMail webmail.FortiManagerIt also resolved four high-severity SQL injection vulnerabilities in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud, and another in FortiMail webmail.FortiManager CloudIt also resolved four high-severity SQL injection vulnerabilities in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager, and FortiManager Cloud, and another in FortiMail webmail.FortiSandbox GUIreleased 10 advisories dealing with 13 bugs, including two critical-severity issues in FortiSIEM and FortiSandbox GUI that could allow unauthenticated attackers to execute arbitrary code (CVE-2026-106173) and bypassFortiSIEMFortinet released 10 advisories dealing with 13 bugs, including two critical-severity issues in FortiSIEM and FortiSandbox GUI that could allow unauthenticated attackers to execute arbitrary code (CVE-2026-106173) andNeurons Patch for IntuneIvanti rolled out patches for seven security defects in Connect Secure, Neurons Patch for Intune, and Xtraction.UniconOSCitrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS.Workspace App for WindowsCitrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS.XenServer 8.4Citrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS.XenServer 9Citrix published three advisories detailing nine security defects impacting Workspace App for Windows, XenServer 8.4 and XenServer 9, and UniconOS.XtractionIvanti rolled out patches for seven security defects in Connect Secure, Neurons Patch for Intune, and Xtraction.

Related Articles