Read the docs

Citrix

Records419All Threatist records
Exploited (KEV)29In CISA KEV
CVSS critical87CVSS 9.0–10.0
CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV
TI-2026-67510 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-10-04TI-2026-60194 Citrix NetScaler Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-60195 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-15872 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 99KEV 2026-09-09TI-2026-07427 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-08-26TI-2026-02639 Citrix NetScaler Out-of-Bounds Read Vulnerability Priority CRITICAL 99KEV 2026-03-30

Components

Products in the NVD configurations · select one to filter the records
Xenserver 50 records HIGH Netscaler Gateway 42 records CRITICAL Netscaler Application Delivery Controller 40 records CRITICAL Netscaler Gateway Firmware 31 records CRITICAL Application Delivery Controller Firmware 30 records CRITICAL Netscaler Application Delivery Controller Firmware 29 records MEDIUM Xenmobile Server 22 records MEDIUM Gateway 19 records HIGH

Records

40 records in Netscaler Application Delivery Controller · all components

TI-2026-60194 CVE-2026-88771 · GHSA-mx58-p288-86qp

Improper input validation in Citrix ADC

Priority CRITICAL 100KEV

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.81894 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-20
TI-2023-04571 CVE-2023-4966 · GHSA-2g42-2pwg-93cj

Unauthenticated sensitive information disclosure in Citrix NetScaler ADC

Priority CRITICAL 100KEV

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Fixed in 8.50, 49.15 +3 CWE-119
TI-2026-02639 CVE-2026-3055 · GHSA-wv7p-q4p2-p6pf

Insufficient input validation leading to memory overread

Priority CRITICAL 99KEV

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.91491 Published 2026-03-23 Fixed in 66.59, 62.23 +1 CWE-125
TI-2025-07100 CVE-2025-7775 · GHSA-2m4h-vp37-6746

Memory corruption in Citrix ADC

Priority CRITICAL 99KEV

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or A…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.2067 Published 2025-08-26 Fixed in 47.48, 59.22 +2 CWE-119
TI-2025-05943 CVE-2025-6543 · GHSA-9gqr-6728-fpv3

Memory corruption in Citrix ADC

Priority CRITICAL 99KEV

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual ser…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.10433 Published 2025-06-25 Fixed in 47.46, 59.19 +1 CWE-119
TI-2023-06000 CVE-2023-6548 · GHSA-w4rw-v3mm-hj8h

Code injection in Citrix NetScaler ADC

Priority CRITICAL 97KEV

Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) re…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03191 Published 2024-01-17 Fixed in 12.35, 51.15 +3 CWE-94
TI-2026-07427 CVE-2026-8452 · GHSA-r7wg-r5wj-c765

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

Priority CRITICAL 95KEV

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.01011 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-119
TI-2023-06001 CVE-2023-6549 · GHSA-8fxh-p33g-qf5m

Memory corruption in Citrix NetScaler ADC

Priority CRITICAL 93KEV

Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.57633 Published 2024-01-17 Fixed in 12.35, 51.15 +3 CWE-119
TI-2026-07426 CVE-2026-8451 · GHSA-6659-v5cc-894x

Insufficient input validation leading to memory overread

Priority MEDIUM 61

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.1424 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-125
TI-2025-07101 CVE-2025-7776 · GHSA-rppg-589c-3659

Memory corruption in Citrix ADC

Priority MEDIUM 56

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RD…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.09143 Published 2025-08-26 Fixed in 47.48, 59.22 +2 CWE-119
TI-2026-60196 CVE-2026-88773 · GHSA-9x87-2c36-ffjf

HTTP Request Smuggling

Priority MEDIUM 52

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03081 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-444
TI-2026-60201 CVE-2026-88778 · GHSA-mh3h-4j34-54mr

TCP Initial Sequence Number (ISN) prediction

Priority MEDIUM 47

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00694 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-342
TI-2026-07604 CVE-2026-8655 · GHSA-rw96-6cvj-x57v

Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service

Priority MEDIUM 45

Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00631 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-119
TI-2026-11401 CVE-2026-13474 · GHSA-256v-mmj4-qqjc

Memory leak in Citrix ADC

Priority MEDIUM 44

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetSca…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00556 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-401
Load more
Open these records in search →