Citrix Uniconos vulnerabilities

3 CVEs affecting Citrix Uniconos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-53564, published 2026-10-13.

More from Citrix.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-53564, published 2026-10-13. Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
• CVE-2026-53563, published 2026-10-13. Medium severity, CVSS 6.9. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
• CVE-2026-53562, published 2026-10-13. High severity, CVSS 8.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.