Loading vulnerability…
Persistent Command Execution in Citrix UniconOS
CVE-2026-53563 is an incorrect permission assignment vulnerability in Citrix UniconOS, formerly eLux, that allows an authenticated, low-privileged local attacker to achieve persistent command execution. It affects Current Release versions before 2607.2 CR and Long Term Service Release versions before 2603 LTSR CU2. The specific affected resource and execution context are not disclosed.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits persistent command execution on the affected system, with high confidentiality impact and low integrity and availability impact. The vulnerability has a CVSS v4.0 score of 6.8. The privilege level of executed commands and the persistence mechanism are not disclosed.
If you can’t patch tonight, do this now.
No interim workaround is documented. Upgrade to a fixed release as soon as possible.
Patch, then assume compromise.
Upgrade Current Release installations to Citrix UniconOS 2607.2 CR or later, or Long Term Service Release installations to Citrix UniconOS 2603 LTSR CU2 or later.
No public exploits tracked yet. Mallory keeps watching.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.