CVE-2021-44520: Citrix XenMobile Server

High severity, CVSS 8.8. EPSS: 5.7% chance of exploitation in the next 30 days.

In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Command Injection vulnerability, leading to remote code execution with root privileges.

Affected products

• Citrix XenMobile Server: version 10.13.0 only; version 10.14.0 only

Published 2022-04-13. Last modified 2026-06-17.