CVE-2026-78547
published 2026-09-11CVE-2026-78547: Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current…
PriorityP420medium4.4CVSS 4.0
AVPACHATNPRLUINVCNVIHVAHSCNSINSANEXCRXIRXARXMAVXMACXMATXMPRXMUIXMVCXMVIXMVAXMSCXMSIXMSAXSXAUXRXVXREXUX
EPSS
0.15%
3.6th percentile
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.
Affected
15 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| citrix | citrix_adm | — | — |
| citrix | citrix_endpoint_management | — | — |
| citrix | citrix_hypervisor | — | — |
| citrix | citrix_netscaler_adc | — | — |
| citrix | citrix_netscaler_gateway | — | — |
| citrix | citrix_virtual_apps_and_desktops | — | — |
| citrix | citrix_workspace_app | — | — |
| citrix | citrix_workspace_app_for_windows | < 2603.11 Current Release (CR) | 2603.11 Current Release (CR) |
| citrix | citrix_workspace_app_for_windows | < 2507.1 LTSR CU3 | 2507.1 LTSR CU3 |
| citrix | citrix_workspace_app_for_windows | < LTSR 2607 | LTSR 2607 |
| citrix | endpoint_management | — | — |
| citrix | netscaler_adc | — | — |
| citrix | netscaler_gateway | — | — |
| citrix | xenmobile | — | — |
| citrix | xenserver | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Citrix
Citrix Security Bulletin CTX697174
vendor_citrix·CVSS 8.8
CVE-2026-19489 [HIGH] Citrix Security Bulletin CTX697174
Citrix Security Bulletin CTX697174
CVE References: CVE-2026-19489, CVE-2026-19490, CVE-2026-78546, CVE-2026-78547, CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, CVE-2026-88778, CVE-2026-88779
Affected Products: Citrix ADM, Citrix Endpoint Management, Citrix NetScaler ADC, Citrix NetScaler Gateway, Citrix Virtual Apps and Desktops, Citrix Workspace app, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenMobile, XenServer
Citrix
Citrix Security Bulletin CTX697034
vendor_citrix·CVSS 8.8
CVE-2026-19489 [HIGH] Citrix Security Bulletin CTX697034
Citrix Security Bulletin CTX697034
CVE References: CVE-2026-19489, CVE-2026-19490, CVE-2026-42491, CVE-2026-78546, CVE-2026-78547
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Citrix Workspace app, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
Citrix
Citrix Security Bulletin CTX697096
vendor_citrix·CVSS 8.8
CVE-2026-19489 [HIGH] Citrix Security Bulletin CTX697096
Citrix Security Bulletin CTX697096
CVE References: CVE-2026-19489, CVE-2026-19490, CVE-2026-42491, CVE-2026-78546, CVE-2026-78547, CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026-88776, CVE-2026-88777, CVE-2026-88778
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix NetScaler ADC, Citrix NetScaler Gateway, Citrix Virtual Apps and Desktops, Citrix Workspace app, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
VulDB
Citrix Workspace App up to CR 2405 out-of-bounds write (WID-SEC-2026-3346)
vuldb·2026-09-14·CVSS 4.4
CVE-2026-78547 [MEDIUM] Citrix Workspace App up to CR 2405 out-of-bounds write (WID-SEC-2026-3346)
A vulnerability marked as critical has been reported in Citrix Workspace App. This affects an unknown function. This manipulation causes out-of-bounds write.
This vulnerability appears as CVE-2026-78547. The attack may be initiated remotely. There is no available exploit.
It is suggested to upgrade the affected component.
GHSA
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
ghsa_unreviewed·2026-09-11
CVE-2026-78547 [MEDIUM] CWE-787 Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.
No detection rules found.
No public exploits indexed.
2026-09-11
Published