CVE-2016-6276

Citrix Linux Virtual Delivery Agent (aka VDA, formerly Linux Virtual Desktop) before 1.4.0 allows local users to gain root privileges via unspecified vectors.

• CWE-264

• http://support.citrix.com/article/CTX216628Vendor Advisory
• http://www.securityfocus.com/bid/93000Third Party Advisory, VDB Entry
• http://support.citrix.com/article/CTX216628Vendor Advisory
• http://www.securityfocus.com/bid/93000Third Party Advisory, VDB Entry

Published

Sep 26, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6268Trend Micro Smart Protection Server 2.5 before build 2200, 2…7.8
• CVE-2016-6269Multiple directory traversal vulnerabilities in Trend Micro …9.1
• CVE-2016-6270The handle_certificate function in /vmi/manager/engine/manag…8.8
• CVE-2016-6271The Bzrtp library (aka libbzrtp) 1.0.x before 1.0.4 allows m…
• CVE-2016-6272XPath injection vulnerability in Epic MyChart allows remote …
• CVE-2016-6273The lmadmin component in Flexera FlexNet Publisher (aka Flex…
• CVE-2016-6277NETGEAR R6250 before 1.0.4.6.Beta, R6400 before 1.0.1.18.Bet…8.8
• CVE-2016-6283Cross-site scripting (XSS) vulnerability in Atlassian Conflu…
• CVE-2016-6285Cross-site scripting (XSS) vulnerability in includes/decorat…
• CVE-2016-6286The "spiffy-cgi-handlers" egg would convert a nonexistent "P…
• CVE-2016-6287The "http-client" egg always used a HTTP_PROXY environment v…
• CVE-2016-6288The php_url_parse_ex function in ext/standard/url.c in PHP b…