secure@citrix.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS secure@citrix.com
03
assessed vulnerabilities (60)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-53564US | — | — | ||
Vulnerability in Citrix UniconOS leading to Arbitrary file read and write
This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. | ||||
| CVE-2026-53563US | — | — | ||
Vulnerability in Citrix UniconOS leading to Persistent Command Execution
This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. | ||||
| CVE-2026-84420US | — | — | ||
Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before L… | ||||
| CVE-2026-84419US | — | — | ||
Out-of-bounds write vulnerability in Citrix Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR… | ||||
| CVE-2026-53562US | — | — | ||
Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.
This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2. | ||||
| CVE-2026-78547US | — | — | ||
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.
This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507… | ||||
| CVE-2026-78546US | — | — | ||
Out-of-bounds read vulnerability in Citirx Workspace app for Windows.
This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, an… | ||||
| CVE-2026-18751US | — | — | ||
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.
This issue affects WorkSpace App: 2607. | ||||
| CVE-2026-53566US | — | — | ||
Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows.
This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20. | ||||
| CVE-2026-53565US | — | — | ||
Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows.
This issue affects Secure Access Client… | ||||
| CVE-2025-12101US | — | Exploit | ||
Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual serv… | ||||
| CVE-2025-8424US | — | — | ||
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or… | ||||
| CVE-2025-7776US | critical9.8 | — | ||
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway… | ||||
| CVE-2025-7775US | critical9.8OT critical | KEV | ||
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual… | ||||
| CVE-2025-6759US | high7.8 | Exploit | ||
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS | ||||
| CVE-2025-6543US | critical9.8OT critical | KEV | ||
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Pr… | ||||
| CVE-2025-4879US | high7.8 | — | ||
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows | ||||
| CVE-2025-0320US | high7.8 | — | ||
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows | ||||
| CVE-2025-5777US | high7.5OT critical | KEV | ||
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | ||||
| CVE-2025-5349US | high8.8 | Exploit | ||
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway | ||||