Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability

KRITISCH 9.8EXPLOITED (CISA KEV)CVE-2019-11634 · Published 22/05/2019 · updated 12/08/2026

Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency. It is known to be used in ransomware campaigns.

Kurz gesagt

CVE-2019-11634 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in receiver (citrix), workspace (citrix).
Wird aktiv ausgenutzt: CISA hat sie am 03/11/2021 in den KEV-Katalog aufgenommen.
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 8.1%, höher als bei 94.8% aller Schwachstellen.
Abhilfe: auf 1904 oder neuer aktualisieren.

Package	Affected versions	Patched versions
receiver citrix	`= 4.9`	No fix yet
workspace citrix	`< 1904`	`1904`

Description

Citrix Workspace App before 1904 for Windows has Incorrect Access Control.

References

support.citrix.com/article/CTX251986 · Vendor Advisory
support.citrix.com/v1/search · Vendor Advisory
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2019-11634

Weitere Schwachstellen in receiver

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free