CVE-2026-18751

MediumCVSS 5.2/10Last modified Oct 22, 2026

Description

External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.

This issue affects WorkSpace App: 2607.

Metrics

CVSS 4.0 5.2/10CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-73

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
CitrixWorkSpace App2607

References

Timeline

Published
Aug 18, 2026
Last modified
Oct 22, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-187526.5The Persistent Login plugin for WordPress is vulnerable to generic SQL Injection via 'wppl_device_id' Cookie in all versions up to, and inclCVE-2026-187539.1The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this CVE-2026-187549.1The product firmware contains an embedded, static RSA private key utilized by the Lighttpd web server for TLS termination. Exposure of this CVE-2026-187557.3A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute aCVE-2026-187567.2HumHub Community Edition 1.18.4 contains a reflected cross-site scripting vulnerability in the Space membership-request workflow. An attackeCVE-2026-187598.5The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication (IPC) mechanism proCVE-2026-18767.5Improper Resource Shutdown or Release vulnerability in Mitsubishi Electric Corporation MELSEC iQ-F Series FX5-ENET/IP Ethernet Module FX5-ENCVE-2026-187659.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Teracity Software Technologies Inc. E-CVE-2026-187666.3A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown proceCVE-2026-187677.8A local low privileged attacker or process can access I/O ports via TcRouter.sys because of exposed IOCTL function calls resulting in a fullCVE-2026-187687.8A local low privileged attacker can access arbitrary physical memory or define its mapping via TcRouter.sys because of exposed IOCTL functioCVE-2026-187697.8A local low privileged attacker can move arbitrary physical memory content via TcRouter.sys because of exposed IOCTL function calls resultin
CVE-2026-18751: Medium severity, CVSS 5.2 | Vulnix