Loading vulnerability…
Arbitrary File Read and Write in Citrix UniconOS
CVE-2026-53564 is a resource exposure vulnerability in Citrix UniconOS, formerly eLux, affecting Current Release versions before 2607.2 CR and Long Term Service Release versions before 2603 LTSR CU2. An unauthenticated attacker controlling a wireless access point can exploit the vulnerability when a target system is within wireless range and a user initiates a connection to the access point's captive portal. Successful exploitation permits arbitrary file reads and writes.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Unauthorized reading and modification of files can compromise the confidentiality and integrity of data on an affected system. The specific accessible files and effective privileges of the file operations are not specified.
If you can’t patch tonight, do this now.
No interim workaround is specified. Upgrade to a fixed release as soon as possible.
Patch, then assume compromise.
Upgrade Citrix UniconOS Current Release installations to 2607.2 CR or later, or Long Term Service Release installations to 2603 LTSR CU2 or later, as appropriate for the deployed release branch.
No public exploits tracked yet. Mallory keeps watching.
4 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.