Skip to content
Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Including Critical Zero-Days

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Including Critical Zero-Days

First seen 14 Oct 2026, 14:38 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 14, 2026 at 17:35 UTC
  • •29 vulnerabilities patched across Citrix, Fortinet, and Ivanti products.
  • •Critical zero-day in Ivanti's Connect Secure actively exploited.
  • •Fortinet's critical flaws could allow unauthenticated code execution.

On October 13, 2026, Citrix, Fortinet, and Ivanti released security updates addressing 29 vulnerabilities across their products, including multiple critical-severity flaws. Citrix's advisories detail nine vulnerabilities affecting Workspace App for Windows and XenServer, with potential for arbitrary code execution and denial-of-service. Fortinet issued patches for 13 bugs, including two critical vulnerabilities in FortiSIEM and FortiSandbox that allow unauthenticated attackers to execute arbitrary code. Ivanti's updates include a critical zero-day in Connect Secure, which has been, and another critical flaw in Neurons Patch for Intune that could leak sensitive authentication data. The vulnerabilities could severely impact organizations using these products, necessitating immediate patching to mitigate risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-04
CVE-2026-105134 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-04
CVE-2026-105133 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-08
CVE-2026-85097 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
Patches released for vulnerabilities
Citrix, Fortinet, and Ivanti released updates addressing 29 vulnerabilities, including critical flaws.
Securityweek
2026-10-13
CVE-2026-104935 added to CISA KEV
CVE-2026-104935, a critical zero-day in Ivanti's Connect Secure, was added to the CISA KEV list due to active exploitation.
Securityweek
2026-10-13
CVE-2026-106042 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-106173 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-13
CVE-2026-109412 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-10-14
First public PoC for CVE-2026-104935
A proof-of-concept for the critical zero-day in Ivanti's Connect Secure was published, increasing urgency for patching.
Securityweek

More articles in this cluster (2)

Following this threat?

Track Adobe and CVE-2026-102255 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (34)

1 / 3

Common questions

Which products are affected?
Citrix Workspace App for Windows, XenServer, FortiSIEM, FortiSandbox, and Ivanti Connect Secure are among the affected products.
How urgent is the patching?
Patching is urgent due to the presence of actively exploited zero-days and critical vulnerabilities.
What should organizations do now?
Organizations should immediately apply the patches released for all affected products to mitigate risks.