CVE-2026-111931 Coder 2.0.0 before 2.34.8 Open Redirect via Workspace App Proxy

Coder from 2.0.0 before 2.34.8 contains an open redirect vulnerability in handleAPIKeySmuggling that allows attackers to redirect users externally via unsanitized r.URL.Path values. Attackers can craft links on trusted workspace app subdomains with paths beginning with double slashes, which becom...

CVE-2026-111931

The Coder software (versions 2.0.0 before 2.34.8 ) contains an open redirect vulnerability in the handleAPIKeySmuggling function. The root cause is the use of unsanitized r.URL.Path values , which allows an attacker to craft links on trusted workspace app subdomains using paths starting with doub...

CVE-2020-13885

Exploit Title: Citrix Workspace app before 1912 for Windows - Privilege Escalation 1 Date: 2020-06-07 Author: Andrew Hess Software Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

CVE-2020-13884

Exploit Title: Citrix Workspace app before 1912 for Windows - Privilege Escalation 2 Date: 2020-06-07 Author: Andrew Hess Software Link: https://www.citrix.com/downloads/workspace-app/legacy-workspace-app-for-windows/workspace-app-for-windows-1911.html/ Bulletin:...

EUVD-2026-100752

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...

EUVD-2026-100751

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1...

CVE-2026-84420

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...

CVE-2026-84419

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1...

CVE-2026-84420 Out-of-Bounds Write and Out-of-Bounds Read

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...

CVE-2026-84420

The Citrix Workspace app for Windows is vulnerable to an Out-of-bounds Read and Out-of-bounds Write vulnerability (CWE-125, CWE-787). The issue requires local access to the target system and allows for potential high impact on availability. Affected versions include Citrix Workspace app for Windo...

CVE-2026-84419 Out-of-Bounds Write

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1...

CVE-2026-84419

The Citrix Workspace app for Windows is vulnerable to an Out-of-bounds Write (CWE-787) as identified by CVE-2026-84419 . This issue requires local access to the target system and the App Protection feature to be enabled. Impacting systems can experience high availability impact. Affected versions...

Citrix Workspace App for Windows Security Bulletin CVE-2026-84419 and CVE-2026-84420

Severity - Medium Description of Problem Vulnerabilities have been discovered in the Citrix Workspace app for Windows. Refer to the information below for further details. Affected Versions: CVE-2026-84419 - The following supported versions of the Citrix Workspace app for Windows are impacted by...

PT-2026-113539

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3...

PT-2026-113538

Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1...

Citrix Workspace App for Windows Multiple Vulnerabilities (CTX697034)

The version of Citrix Workspace App installed on the remote Windows host is 2507 / 2507.1 LTSR prior to 2507.1 LTSR CU3, or a Current Release prior to 2603.11. It is, therefore, affected by multiple vulnerabilities: - An out-of-bounds read vulnerability exists in Citrix Workspace app for Windows...

PT-2026-95209

Name of the Vulnerable Software and Affected Versions Nextcloud Team Folders affected versions not specified Description An issue exists in the team folders app previously known as group folders when integrated with the workspace app. This flaw allows delegated administrators with API/REST-only...

CVE-2026-77169: Improper Access Control

A vulnerability in the team folders formerly group folders app when used in combination with the workspace app allowed API/REST-only delegated administrators to bypass folder-level authorization controls. The workspace app enables organizations to delegate limited administrative privileges for te...

CVE-2026-78547

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...

EUVD-2026-76445

Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...