CVE-2002-2426: Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presen...

Security readout for executives and security teams

This legacy Citrix issue could let an attacker trick a signed-in user into launching published applications under that user’s session. The main business risk is unauthorized program execution inside older Citrix environments. The provided sources do not confirm active exploitation or give complete patch details. Exposure is most likely in legacy Citrix Presentation Server, MetaFrame Presentation Server, or Access Essentials deployments still reachable by users. Modern Citrix products are not identified as affected in the supplied sources. Risk depends on whether authenticated users can be induced to process attacker-controlled ICA or web content. Prioritize this where legacy Citrix systems remain in production or provide access to sensitive applications. If those products are absent, business urgency is low. If present and internet-accessible, treat remediation or isolation as time-sensitive because compromise may occur through trusted user sessions. Mitigation focus: Check Citrix CTX115245 and vendor guidance for supported fixes or configuration changes.; Retire or isolate affected legacy Citrix products where still present.; Restrict access to Citrix interfaces to trusted networks and managed devices..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.