Loading vulnerability…
Local Privilege Escalation in Citrix UniconOS via Improper Link Resolution
CVE-2026-53562 is an improper link resolution vulnerability in Citrix UniconOS, formerly eLux. Improper handling of links before file access allows an authenticated, low-privileged local attacker to escalate privileges. The vendor bulletin identifies affected releases as Current Release versions before 2607.2 and Long Term Service Release versions before 2603 LTSR CU2. The specific vulnerable function and file operation have not been identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits local privilege escalation, with high impact to confidentiality, integrity, and availability. Citrix assigns a CVSS v4.0 score of 8.5. The exact privileges obtainable and the specific resources exposed are not detailed.
If you can’t patch tonight, do this now.
No interim workaround is documented in the vendor bulletin. Citrix strongly recommends upgrading affected installations to a fixed release as soon as possible.
Patch, then assume compromise.
Upgrade Citrix UniconOS Current Release installations to version 2607.2 or later, or Long Term Service Release installations to version 2603 LTSR CU2 or later. Use these vendor-specified fixed versions rather than the less-specific 2607 CR threshold appearing in other vulnerability metadata.
No public exploits tracked yet. Mallory keeps watching.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.