CVE-2022-26151: Command Injection
Published Apr 12, 2022
·Updated
Citrix XenMobile Server 10.12 through RP11, 10.13 through RP7, and 10.14 through RP4 allows Command Injection.
Affected Software
11 affected components
Citrix XenMobile Server=10.13.0
Citrix XenMobile Server=10.13.0-rolling_patch_3
Citrix XenMobile Server=10.13.0-rolling_patch_4
Citrix XenMobile Server=10.13.0-rolling_patch_5
Citrix XenMobile Server=10.13.0-rolling_patch_6
Citrix XenMobile Server=10.13.0-rolling_patch_7
Citrix XenMobile Server=10.14.0
Citrix XenMobile Server=10.14.0-rolling_patch_1
Citrix XenMobile Server=10.14.0-rolling_patch_2
Citrix XenMobile Server=10.14.0-rolling_patch_3
Citrix XenMobile Server=10.14.0-rolling_patch_4
Event History
Apr 12, 2022
CVE Published
via MITRE·11:21 PM
Data Sourced
via MITRE·11:21 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-26151?
The severity of CVE-2022-26151 is critical with a severity score of 7.2.
2
Which versions of Citrix XenMobile Server are affected by CVE-2022-26151?
Citrix XenMobile Server versions 10.13.0-rolling_patch_3 and later (including 10.13.0 through RP7 and 10.14.0 through RP4) are affected by CVE-2022-26151.
3
What is the vulnerability type of CVE-2022-26151?
CVE-2022-26151 is a Command Injection vulnerability.
4
How can I fix CVE-2022-26151?
To fix CVE-2022-26151, it is recommended to apply the latest rolling patches or updates provided by Citrix.
5
Where can I find more information about CVE-2022-26151?
You can find more information about CVE-2022-26151 on the Citrix support website and the CHT Security news article.