Citrix_Secure_Access_LPE_0DAY

Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...

ivanti-cve-2023-35080-privilege-escalation-bof

Ivanti Connect Secure VPN Privilege Escalation Ivanti Secure Access previously Pulse Secure privilege escalation Cobalt Strike BOF CVE-2023-35080. Exploit by Alex and BOF by Tijme. Made possible by Northwave Cyber Security Description This is a Cobalt Strike CS Beacon Object File BOF and executab...

CVE-2026-55400

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...

EUVD-2026-58116

CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service...

CVE-2026-55402

An out-of-bounds read vulnerability in Secure Access servers prior to version 14.57 could allow a man-in-the-middle attacker to send specially crafted data to trigger a persistent denial of service. The connected documents do not specify the exact vulnerable component, underlying root cause detai...

CVE-2026-55401

CVE-2026-55401 describes a null dereference in the load-balancing sub-system of Secure Access servers prior to version 14.57. An unauthenticated packet directed to a server with load balancing enabled can trigger a crash of the internal load balancer. The impact is that the server remains able to...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...

EUVD-2026-58115

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful...

EUVD-2026-58114

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service...

CVE-2026-55400

CVE-2026-55400 describes an integer underflow in Secure Access servers prior to 14.57. With an authenticated session, an attacker can send specially crafted traffic to a server in a non-default configuration, causing a persistent denial of service. Affected product/version: Secure Access servers

CVE-2026-55400

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service...

CVE-2026-55400

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service...

Citrix Secure Access < 26.6.1.20 Multiple Vulnerabilities (CTX696734)

The version of Citrix Secure Access installed on the remote host is prior to 26.6.1.20. It is, therefore, affected by multiple vulnerabilities: - An improper privilege management vulnerability allows a low-privileged user to escalate privileges. CVE-2026-53565 - An out-of-bounds read vulnerabilit...

CVE-2026-55399

CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-persistent DoS against the publisher...

CVE-2026-55398

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server...

CVE-2026-33445

CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server...

CVE-2026-33444

CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server...

CVE-2026-55399 Resource exhaustion vulnerability in the Secure Access publisher

CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-persistent DoS against the publisher...