CVE-2026-78546

MediumCVSS 4.8/10Last modified Sep 16, 2026

Description

Out-of-bounds read vulnerability in Citirx Workspace app for Windows.

This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.

Metrics

CVSS 4.0 4.8/10

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

Vendor	Product	Versions
Citirx	Workspace app for Windows	< 2603.11 Current Release (CR); < 2507.1 LTSR CU3; < LTSR 2607

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697034&articleTitle=Citrix_Workspace_app_for_Windows_Security_Bulletin_CVE_2026_78546_and_CVE_2026_78547

Timeline

Published: Sep 11, 2026
Last modified: Sep 16, 2026
NVD status: Awaiting Analysis

Related CVEs from 2026

CVE-2026-785474.4Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2 CVE-2026-78557.2A vulnerability was detected in D-Link DI-8100 16.07.26A1. Affected by this issue is the function tggl_asp of the file /tggl.asp of the comp CVE-2026-785507.2The Okta Access Gateway management console passes user-supplied input to eval() without sanitization during an authenticated administrator S CVE-2026-785518.8RansomLook contains multiple weaknesses in its authentication endpoint that allow an unauthenticated remote attacker to enumerate valid user CVE-2026-785524.9The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is inter CVE-2026-785537.0RansomLook created its Flask session-signing key without explicitly restricting the file permissions. The secret_key file was created using CVE-2026-785559.4RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration page. Although the interface disp CVE-2026-785567.4A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The affected software does not properly valid CVE-2026-785578.3A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9). The application fails to properly sanitize or CVE-2026-78567.2A flaw has been found in D-Link DI-8100 16.07.26A1. This affects an unknown part of the file /url_member.asp of the component Web Management CVE-2026-785606.5The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP heade CVE-2026-785698.8IBM Langflow OSS 1.0.0 through 1.11.5 could allow an authenticated attacker to execute arbitrary code due to an incomplete denylist in the s