EIP-2026-115060

This advisory details a heap corruption vulnerability in Citrix XML Service (ctxxmls.exe) for XenApp and XenDesktop, triggered by sending a POST request with an excessively long non-existent extension DLL path. The issue leads to potential arbitrary code execution, though exploitation reliability was not confirmed.