CVE-2026-53566— Out-of-bounds memory read
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Citrix | Citrix Secure Access Client for Windows | < 26.6.1.20 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-53566
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds memory read
Source: NVD (National Vulnerability Database)
Vulnerability Description
Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Citrix | Citrix Secure Access Client for Windows | 0 ~ 26.6.1.20 | - |
II. Public POCs for CVE-2026-53566
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53566
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-53566 (1)
IV. Related Vulnerabilities
Same vendor: Citrix
- CVE-2026-53565
Local Privilege escalation allows a low-privileged user to g - CVE-2025-6759
Local Privilege escalation allows a low-privileged user to g - CVE-2025-0320
Citrix Secure Access - Local Privilege escalation allows a l - CVE-2025-4879
Citrix Workspace App for Windows - Local Privilege escalatio - CVE-2025-1223
An attacker can gain application privileges in order to perf
Same weakness: CWE-125
- CVE-2026-62353
TDengine: Authenticated Out-of-Bounds Read in SQL Lexer tGet - CVE-2026-62351
TDengine: Unauthenticated Remote Denial of Service via Out-o - CVE-2026-60065
NGINX Plus ngx_stream_mqtt_filter_module vulnerability - CVE-2026-61862
ImageMagick before 7.1.2-26 Information Disclosure via ident - CVE-2026-15030
ASUS System Control Interface v3越界读取漏洞
V. Comments for CVE-2026-53566
No comments yet