Citrix

Company

Citrix Systems, Inc. is an American multinational cloud computing and virtualization technology company that provides server, application and desktop virtualization, networking, software as a service (SaaS), and cloud computing technologies. Citrix claims that its products are used by over 400,000 clients worldwide, including 99% of the Fortune 100 and 98% of the Fortune 500.

From Wikipedia, licensed under CC BY-SA 4.0. Shown as published there.

Facts

Country: United StatesSource: Wikidata
Founded: 1989Source: Wikidata
Founded by: Ed IacobucciSource: Wikidata
CEO: David J. HenshallSource: Wikidata
Headquarters: Fort LauderdaleSource: Wikidata
Employees: 8,400 (2019)Source: Wikidata
Sector: Technology, Software industrySource: Wikidata
Listed on: Nasdaq (CTXS)Source: Wikidata
Subsidiaries: Citrix (Switzerland)Source: Wikidata
Products: Citrix ADC, Citrix Analytics, Citrix Content Collaboration, Citrix Endpoint Management, Citrix SD-WAN, Citrix Secure Internet Access, Citrix Secure Workspace Access, Citrix ShareFile and 5 moreSource: Wikidata
Official website: www.citrix.comSource: Wikidata
Wikipedia: Read on WikipediaSource: Wikidata

Vulnerabilities

1 CVE in our records, 0 known exploited (on CISA's KEV list).

1Critical

0High

0Medium

0Low

0No score

Source: NVD and CISA KEV

Security timeline

6 November 2026Vulnerability reported by Recorded Future BlogOctober 2026 sees 82 high-impact CVEs prioritised, 13% fewer than September
2 November 2026Vulnerability reported by Trail of BitsCritical Citrix XenServer flaw could let unauthenticated attackers take over hosts

Recent news

Recorded Future Blog· 1d· High

October 2026 sees 82 high-impact CVEs prioritised, 13% fewer than September

Recorded Future's Insikt Group identified 82 high-impact vulnerabilities for October 2026, 52 with a Very Critical risk score, down 13% from 94 in September. Of these, 36 were surfaced through CISA's KEV catalogue, 33 from open sources and 13 only from honeypot data, across products from 51 vendors, with Citrix and Microsoft together accounting for about 15%. Insikt also published Nuclei detection templates for the two PHP2Shell flaws and for CVE-2026-87902 and CVE-2026-86124.

Am I affected?1

Trail of Bits· 5d· Critical

Critical Citrix XenServer flaw could let unauthenticated attackers take over hosts

Citrix's November 3 bulletin describes CVE-2026-98432, a critical flaw in XenServer 8.4 and XenServer 9 that could let an unauthenticated attacker compromise virtualisation hosts and the Workload Balancing and Conversion Manager appliances. Exploitation requires access to the management network, so exposure depends on network reachability. Fixes are available through the Normal and Early Access channels.

Am I affected?6