Citrix security advisory (AV26-702)
Serial number: AV26-702 Date: July 15, 2026 On July 14, 2026, Citrix published security advisories to address vulnerabilities in the following products: Citrix Secure Access Client for Windows – versions prior to 26.6.1.20 Citrix Endpoint Analysis Client for Windows – versions prior to 26.5.1.7 The Cyber Centre encourages users and administrators to review the provided web links and perform the suggested mitigations. Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows Security Bulletin for CVE-2026-53565 and CVE-2026-53566 Citrix Security Advisories
CSIRTS triage
- What
- Citrix published advisories addressing vulnerabilities in Secure Access Client and Endpoint Analysis Client.
- Who is affected
- Users of Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows.
- Urgency
- Remediation urgency is unclear as specific vulnerabilities are not detailed.
- Action
- Update to the latest versions provided by Citrix.
AI-assisted analysis generated from the source advisory — verify against the original.
Details
Original advisory: https://cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-702
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-535650.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
- Low exploitation riskCVE-2026-535660.13% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 3% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-53565 | coverage & exploitation status | NVD · CVE.org |
| CVE-2026-53566 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
- medium[NEW] [medium] Citrix Systems Secure Access Client for Windows: Multiple vulnerabilitiescert-bund
- unknownMultiple Vulnerabilities in Citrix Products (July 15, 2026)cert-fr-avis
- unknownCVE-2026-53566: Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue…nvd
- unknownCVE-2026-53565: Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix…nvd
More from Canadian Centre for Cyber Security
- unknownGoogle security advisory (AV26-768)2026-07-31
- unknownRails security advisory (AV26-767)2026-07-31
- unknownSolarWinds security advisory (AV26-766)2026-07-31
- unknownGladinet security advisory (AV26-765)2026-07-30
- unknownPHP Group security advisory (AV26-764)2026-07-30