Improper privilege management in Citrix Endpoint Analysis Client for Windows and Secure Access Client for Windows - CVE-2026-53565

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU137689

Improper privilege management in Citrix Endpoint Analysis Client for Windows and Secure Access Client for Windows - CVE-2026-53565

Published: July 15, 2026


Vulnerability identifier: #VU137689
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-53565
CWE-ID: CWE-269
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges to SYSTEM.

The vulnerability exists due to improper privilege management in Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows when running on a local system. A local user can exploit the privilege management flaw to escalate privileges to SYSTEM.


Affected software

Citrix Endpoint Analysis Client for Windows
Secure Access Client for Windows

How to mitigate CVE-2026-53565

Install security update from vendor's website.

Citrix Endpoint Analysis Client for Windows - update to 26.5.1.7
Secure Access Client for Windows - update to 26.6.1.20

External References

Related Security Bulletins