CVE-2026-53562
published 2026-10-13CVE-2026-53562: Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603…
PriorityP341high8.5CVSS 4.0
AVLACLATNPRLUINVCHVIHVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.15%
4.2th percentile
Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.
This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_endpoint_management | — | — |
| citrix | citrix_netscaler_adc | — | — |
| citrix | citrix_netscaler_gateway | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | citrix_workspace_app | — | — |
| citrix | endpoint_management | — | — |
| citrix | uniconos | < 2607 CR | 2607 CR |
| citrix | uniconos | < 2603 LTSR CU2 | 2603 LTSR CU2 |
| citrix | xenmobile | — | — |
| citrix | xenserver | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
Citrix Security Bulletin CTX697181
vendor_citrix·CVSS 6.5
CVE-2026-102700 [MEDIUM] Citrix Security Bulletin CTX697181
Citrix Security Bulletin CTX697181
CVE References: CVE-2026-102700, CVE-2026-102701, CVE-2026-107406, CVE-2026-53562, CVE-2026-53563, CVE-2026-53564, CVE-2026-79610, CVE-2026-84419, CVE-2026-84420, CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, CVE-2026-88778, CVE-2026-88779
Affected Products: Citrix ADM, Citrix Endpoint Management, Citrix NetScaler ADC, Citrix NetScaler Gateway, Citrix Virtual Apps and Desktops, Citrix Workspace App, Endpoint Management, XenMobile, XenServer
Citrix
Citrix Security Bulletin CTX697187
vendor_citrix·CVSS 6.5
CVE-2026-102700 [MEDIUM] Citrix Security Bulletin CTX697187
Citrix Security Bulletin CTX697187
CVE References: CVE-2026-102700, CVE-2026-102701, CVE-2026-107406, CVE-2026-53562, CVE-2026-53563, CVE-2026-53564, CVE-2026-79610, CVE-2026-84419, CVE-2026-84420, CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, CVE-2026-88778, CVE-2026-88779
Affected Products: Citrix ADM, Citrix Endpoint Management, Citrix NetScaler ADC, Citrix NetScaler Gateway, Citrix Virtual Apps and Desktops, Citrix Workspace App, Endpoint Management, XenMobile, XenServer
GHSA
Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.
ghsa_unreviewed·2026-10-13
CVE-2026-53562 [HIGH] CWE-59 Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.
Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.
This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.
No detection rules found.
No public exploits indexed.
2026-10-13
Published