CVE-2026-53562
Received Received - Intake

Improper Link Resolution in Citrix UniconOS

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Citrix Systems, Inc.

Description
Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-13
Last Modified
2026-10-13
Generated
2026-10-13
AI Q&A
2026-10-13
EPSS Evaluated
N/A
NVD
CVE-2026-53562
EUVD
EUVD-2026-98896

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
Citrix UniconOS 0
Citrix UniconOS 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a link following vulnerability in Citrix UniconOS where improper link resolution before file access allows an attacker to access unauthorized files by exploiting symbolic links. It affects versions before 2607 CR and before 2603 LTSR CU2.

Impact Analysis

An attacker with local access could exploit this to read sensitive files, escalate privileges, or perform unauthorized actions on the system. The high CVSS score indicates significant risk of confidentiality, integrity, and availability impacts.

Mitigation Strategies

Update Citrix UniconOS to version 2607 CR or later, or to 2603 LTSR CU2 or later to address the improper link resolution vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-53562. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart