Multiple privilege escalation vulnerabilities found in Citrix Secure Access Client for Windows and Linux
Two critical privilege escalation vulnerabilities, CVE-2026-118268 and CVE-2026-118269, have been discovered in Citrix Secure Access Client versions prior to 26.11.1.6 for Windows and 26.10.4 for Linux, respectively. These flaws allow an attacker to elevate their privileges on affected systems. Citrix has released security bulletins CTX697280 and CTX697281 providing details and patches for these vulnerabilities. Administrators are advised to refer to Citrix's official advisories and apply updates promptly to mitigate risk.
Entenda a falha
A vulnerabilidade
Two privilege escalation flaws affect Citrix Secure Access Client. CVE-2026-118268 is in the Windows client before 26.11.1.6, and CVE-2026-118269 is in the Linux client before 26.10.4. The story calls both critical, but the articles do not give a CVSS score. They say an attacker can elevate privileges on an affected system, and they do not say what access, configuration or user interaction is required. The fixes are Windows 26.11.1.6 and Linux 26.10.4, described in Citrix bulletins CTX697280 (Windows) and CTX697281 (Linux).
Como foi descoberta
The articles do not say who found the flaws or how. Citrix published bulletins CTX697280 and CTX697281 on 12 November 2026, and CERT-FR issued advisory CERTFR-2026-AVI-1519 the same day, pointing to the vendor bulletins for patches. Neither source mentions exploitation in the wild.
Explicação gerada por IA a partir da matéria e dos artigos, em 12/11/2026 13:27.
Detalhes técnicos
CVE-2026-118268 affects Citrix Secure Access Client for Windows versions before 26.11.1.6, while CVE-2026-118269 impacts the Linux client versions prior to 26.10.4. Both vulnerabilities permit privilege escalation, potentially enabling attackers to gain elevated system permissions.
Remediação
Users should apply the patches as outlined in Citrix security bulletins CTX697280 (Windows) and CTX697281 (Linux) available on Citrix's support portal to address these vulnerabilities.
Linha do tempo
-
Multiple privilege escalation vulnerabilities found in Citrix Secure Access Client for Windows and Linux
ler a análise desta fonte ocultar
Two critical privilege escalation vulnerabilities, CVE-2026-118268 and CVE-2026-118269, have been discovered in Citrix Secure Access Client versions prior to 26.11.1.6 for Windows and 26.10.4 for Linux, respectively. These flaws allow an attacker to elevate their privileges on affected systems. Citrix has released security bulletins CTX697280 and CTX697281 providing details and patches for these vulnerabilities. Administrators are advised to refer to Citrix's official advisories and apply updates promptly to mitigate risk.
Technical Details
CVE-2026-118268 affects Citrix Secure Access Client for Windows versions before 26.11.1.6, while CVE-2026-118269 impacts the Linux client versions prior to 26.10.4. Both vulnerabilities permit privilege escalation, potentially enabling attackers to gain elevated system permissions.
Remediation
Users should apply the patches as outlined in Citrix security bulletins CTX697280 (Windows) and CTX697281 (Linux) available on Citrix's support portal to address these vulnerabilities.