Read the docs

Citrix

Records419All Threatist records
Exploited (KEV)29In CISA KEV
CVSS critical87CVSS 9.0–10.0
CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV
TI-2026-67510 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-10-04TI-2026-60194 Citrix NetScaler Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-60195 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-15872 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 99KEV 2026-09-09TI-2026-07427 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-08-26TI-2026-02639 Citrix NetScaler Out-of-Bounds Read Vulnerability Priority CRITICAL 99KEV 2026-03-30

Components

Products in the NVD configurations · select one to filter the records
Xenserver 50 records HIGH Netscaler Gateway 42 records CRITICAL Netscaler Application Delivery Controller 40 records CRITICAL Netscaler Gateway Firmware 31 records CRITICAL Application Delivery Controller Firmware 30 records CRITICAL Netscaler Application Delivery Controller Firmware 29 records MEDIUM Xenmobile Server 22 records MEDIUM Gateway 19 records HIGH

Records

8 records in Cloudportal Services Manager · all components

TI-2013-02575 CVE-2013-2934 · GHSA-7vff-qw8c-gfw5

Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 does not…

Priority MEDIUM 46

Citrix CloudPortal Services Manager (aka Cortex) 10.0 before Cumulative Update 3 does not properly restrict access to web services, which has unspecified impact and attack vectors, a different vulnerability than other CV…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01648 Published 2013-09-12 No fix listed CWE-264
Open these records in search →