Known Vulnerabilities for Desktop Server by Citrix
Listed below are 4 of the newest known vulnerabilities associated with "Desktop Server" by "Citrix".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123513 json | Vikunja before 2.7.1 contains a credential exposure vulnerability that allows attackers to steal stored auth tokens by induci... | Not Provided | 2026-11-08 | 2026-11-10 |
| CVE-2026-123208 json | noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS that... | Not Provided | 2026-11-05 | 2026-11-09 |
| CVE-2026-116247 json | When a server in pgAdmin 4 had no password file, client certificate or client key configured, or the configured one could not... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116242 json | pgAdmin 4 opens SSH tunnels with the sshtunnel library but gave it neither host_pkey_directories nor ssh_config_file, so it a... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116240 json | In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds the ... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116239 json | In server mode pgAdmin 4 keeps an account per authentication source, so the same username can exist as, for example, an inter... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-116238 json | In server mode pgAdmin 4 locks an internal account after MAX_LOGIN_ATTEMPTS failed logins (3 by default). The limit could be ... | Not Provided | 2026-10-30 | 2026-11-06 |
| CVE-2026-115570 json | Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43... | Not Provided | 2026-10-23 | 2026-10-23 |
| CVE-2026-112303 json | GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the gd_resource ... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-112197 json | Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attack... | Not Provided | 2026-10-28 | 2026-11-09 |