Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Oct 13, 2026 · Catalog

   Detected

   Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.

2. Oct 14, 2026 · NIST NVD

   Updated

   Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.

3. Oct 14, 2026 · NIST NVD

   Updated

   Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.

Sources

• Canadian Centre for Cyber SecurityGovernment advisoryCVE-2026-53564

  Serial number: AV26-1034 Date: October 13, 2026 As of October 13, 2026, Citrix is affected by vulnerabilities in the following products: UniconOS Prior to 2603 LTSR CU2 Prior to 2607.2 CR XenServer Version 8.4 XenServer Version 9 The Cyber Centre encourages users and administrato

  cyber.gc.ca
• CVE.orgVulnerability recordCVE-2026-53564

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-53564

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2026-53564

  Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.

  nvd.nist.gov

References

• Reference · support.citrix.com