All vulnerabilities
CVE-2026-53562

UniconOS: Local Privilege Escalation

Citrix UniconOSNetwork & edge
Open in ThreatlineRecord JSON
CVSS
8.5High
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.15%Chance of exploitation activity in the next 30 days, higher than 4% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in2607 CRAlso 2603 LTSR CU2CVE List
Published13 Oct 2026Updated 13 Oct 2026CVE List

What fixes it

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.

This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.

Text from CVE List

Affected versions 2

  • UniconOSaffected: all versions before 2607 CRCVE List
  • UniconOSaffected: all versions before 2603 LTSR CU2CVE List

References 1