Summary
Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows contain the vulnerabilities mentioned below
Products covered
Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows
The following supported versions of Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows are affected by CVE-2026-53565: Citrix Secure Access Client for Windows versions BEFORE 26.6.1.20 Citrix Endpoint Analysis Client for Windows versions BEFORE 26.5.1.7 The following supported versions of Citrix Secure Access Client for Windows are affected by CVE-2026-53566: Citrix Secure Access Client for Windows versions BEFORE 26.6.1.20
Remediation
Cloud Software Group strongly urges customers of Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client to install the relevant updated versions as soon as possible:
Vendor-listed fixes
Citrix Secure Access Client for Windows 26.6.1.20 and later releases
Citrix Endpoint Analysis Client for Windows 26.5.1.7 and later releases
CVEs in this advisory 2
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- The vendor changed the advisory's last-updated date.
- Added affected products: The following supported versions of Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows are affected by CVE-2026-53565: Citrix Secure Access Client for Windows versions BEFORE....
- Removed affected products: The following supported versions of Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for Windows are affected by CVE-2026-53565: Citrix Secure Access Client for Windows versions BEFORE....
- The vendor changed its remediation guidance.
Updates
- Added to SecurityAlert
We collected the advisory from the official source.
- Published by Citrix
The publication date reported by the vendor.
- Confirmed at the source
Our collector saw this advisory during a later source check.