EN PT-BR
← Voltar ao feed
medium

CERT-FR relays Citrix advisories for multiple flaws in Scout, UniconOS Management and XenServer, including RCE and privilege escalation

1 fonte(s) · 1 atualização(ões) · publicado 03/11/2026 21:00 · coletado há 1 hora

CERT-FR bulletin CERTFR-2026-AVI-1449 relays two Citrix security bulletins of 3 November 2026: CTX697256 (XenServer Security Update for Multiple Issues) and CTX697300 (Citrix Security Advisory for CVE-2026-111497, impact on Unicon eLux Scout). CERT-FR says the flaws allow remote arbitrary code execution and privilege escalation. The affected products are Scout Cloud Gateway (SCG) On-Prem, UniconOS Management (Scout) On-Prem and XenServer 8.4 and 9. The bulletin does not map each CVE to a product. It also gives no CVSS scores, prerequisites or exploitation status.

Entenda a falha

A vulnerabilidade

CERT-FR bulletin CERTFR-2026-AVI-1449 relays two Citrix bulletins of 3 November 2026 (CTX697256 and CTX697300) covering nine CVEs: CVE-2022-36763, CVE-2022-36764, CVE-2024-38796, CVE-2024-38797, CVE-2026-102703, CVE-2026-111497, CVE-2026-45447, CVE-2026-97631 and CVE-2026-98432. CERT-FR says they allow remote arbitrary code execution and privilege escalation. It does not map each CVE to a product, nor give CVSS scores, prerequisites or the component involved. CVE-2026-111497 is named only in the title of CTX697300, which concerns Unicon eLux Scout. Affected: Scout Cloud Gateway On-Prem without patch 2605.1-3, UniconOS Management (Scout) On-Prem without patch 2609.1, Scout LTSR without patch 2508 CU2 LTSR, and XenServer 8.4 and 9 with Workload Balancing before 2026.1.1 or Conversion Manager before 2026.2.0. Fixes are those versions or later.

Como funciona

The articles do not describe how the vulnerable code works, so the process cannot be reconstructed. CERT-FR only states the resulting impact: a remote attacker could execute arbitrary code, and privilege escalation is also possible. Which input reaches which component, and at which step it fails, is not stated for any of the CVEs.

Por que é vulnerável

The articles do not state the root cause of any of the nine CVEs. The fix is delivered as security patches for Scout and UniconOS Management and as updated Workload Balancing and Conversion Manager versions for XenServer, but what each fix changes is not described.

Como foi descoberta

The articles do not say who found the flaws or how. CERT-FR states only that multiple vulnerabilities were discovered in Citrix products and points to the vendor bulletins CTX697256 and CTX697300, published on 3 November 2026; its own bulletin is dated 4 November 2026. It does not report exploitation in the wild.

Explicação gerada por IA a partir da matéria e dos artigos, em 06/11/2026 12:23.

Detalhes técnicos

  • The CVEs listed are CVE-2022-36763, CVE-2022-36764, CVE-2024-38796, CVE-2024-38797, CVE-2026-102703, CVE-2026-111497, CVE-2026-45447, CVE-2026-97631 and CVE-2026-98432 (cert.cyber.gouv.fr).
  • CERT-FR names CVE-2026-111497 only through the title of Citrix bulletin CTX697300, which concerns Unicon eLux Scout (cert.cyber.gouv.fr).
  • Affected: SCG On-Prem without security patch 2605.1-3; UniconOS Management (Scout) On-Prem without security patch 2609.1; Scout LTSR without security patch 2508 CU2 LTSR; XenServer 8.4 and 9 with Workload Balancing earlier than 2026.1.1 and Conversion Manager earlier than 2026.2.0 (cert.cyber.gouv.fr).
  • The bulletin does not state any exploitation in the wild.

Remediação

Apply the fixes listed in Citrix bulletins CTX697256 and CTX697300: SCG security patch 2605.1-3, UniconOS Management security patch 2609.1, Scout LTSR security patch 2508 CU2 LTSR, Workload Balancing 2026.1.1 or later, and Conversion Manager 2026.2.0 or later (cert.cyber.gouv.fr).

Linha do tempo

  1. cert.cyber.gouv.fr ↗ · pub. 03/11/2026 21:00 · coletado 06/11 12:00 primeiro registro

    CERT-FR relays Citrix advisories for multiple flaws in Scout, UniconOS Management and XenServer, including RCE and privilege escalation

    ler a análise desta fonte

    CERT-FR bulletin CERTFR-2026-AVI-1449 relays two Citrix security bulletins of 3 November 2026: CTX697256 (XenServer Security Update for Multiple Issues) and CTX697300 (Citrix Security Advisory for CVE-2026-111497, impact on Unicon eLux Scout). CERT-FR says the flaws allow remote arbitrary code execution and privilege escalation. The affected products are Scout Cloud Gateway (SCG) On-Prem, UniconOS Management (Scout) On-Prem and XenServer 8.4 and 9. The bulletin does not map each CVE to a product. It also gives no CVSS scores, prerequisites or exploitation status.

    Technical Details

    • The CVEs listed are CVE-2022-36763, CVE-2022-36764, CVE-2024-38796, CVE-2024-38797, CVE-2026-102703, CVE-2026-111497, CVE-2026-45447, CVE-2026-97631 and CVE-2026-98432 (cert.cyber.gouv.fr).
    • CERT-FR names CVE-2026-111497 only through the title of Citrix bulletin CTX697300, which concerns Unicon eLux Scout (cert.cyber.gouv.fr).
    • Affected: SCG On-Prem without security patch 2605.1-3; UniconOS Management (Scout) On-Prem without security patch 2609.1; Scout LTSR without security patch 2508 CU2 LTSR; XenServer 8.4 and 9 with Workload Balancing earlier than 2026.1.1 and Conversion Manager earlier than 2026.2.0 (cert.cyber.gouv.fr).
    • The bulletin does not state any exploitation in the wild.

    Remediation

    Apply the fixes listed in Citrix bulletins CTX697256 and CTX697300: SCG security patch 2605.1-3, UniconOS Management security patch 2609.1, Scout LTSR security patch 2508 CU2 LTSR, Workload Balancing 2026.1.1 or later, and Conversion Manager 2026.2.0 or later (cert.cyber.gouv.fr).