CVE-2022-26151: Citrix XenMobile Server

High severity, CVSS 7.2. EPSS: 7.3% chance of exploitation in the next 30 days.

Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.

Affected products

• Citrix XenMobile Server: version 10.13.0 only; version 10.14.0 only

Published 2022-04-13. Last modified 2026-06-17.