Citrix Security Update – 29 July 2026

The addressed vulnerabilities could allow the attacker to perform denial-of-service attacks, execute arbitrary code, and gain access to the affected products.

Sample of the addressed vulnerabilities:

1. Citrix XenServer for Multiple Issues Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-62428):

• CVSS: 7.8
• Attack Vector: Local
• Attack Complexity: High
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Access

2. Citrix XenServer for Multiple Issues Divide By Zero Vulnerability (CVE-2026- 62431):

• CVSS: 7.5
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Denial of Service