Citrix

Records419All Threatist records

Exploited (KEV)29In CISA KEV

CVSS critical87CVSS 9.0–10.0

CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV

TI-2026-67510 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 95KEV 2026-10-04 TI-2026-60194 Citrix NetScaler Improper Input Validation Vulnerability CRITICAL 100KEV 2026-09-27 TI-2026-60195 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 100KEV 2026-09-27 TI-2026-15872 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CRITICAL 99KEV 2026-09-09 TI-2026-07427 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CRITICAL 95KEV 2026-08-26 TI-2026-02639 Citrix NetScaler Out-of-Bounds Read Vulnerability CRITICAL 99KEV 2026-03-30

Components

Products in the NVD configurations · select one to filter the records

Xenserver 50 records HIGH Netscaler Gateway 42 records CRITICAL Netscaler Application Delivery Controller 40 records CRITICAL Netscaler Gateway Firmware 31 records CRITICAL Application Delivery Controller Firmware 30 records CRITICAL Netscaler Application Delivery Controller Firmware 29 records MEDIUM Xenmobile Server 22 records MEDIUM Gateway 19 records HIGH

Records

16 records in Netscaler Sd-wan · all components

TI-2019-09729 CVE-2019-12989 · GHSA-9q4p-22w8-h32x

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

CRITICAL 100KEV

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.94957 Published 2019-07-16 No fix listed CWE-89

TI-2017-04148 CVE-2017-6316 · GHSA-9f8x-323m-6vw4

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to…

CRITICAL 100KEV

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7303 Published 2017-07-20 No fix listed

TI-2019-09731 CVE-2019-12991 · GHSA-462p-6gjx-6wj6

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

CRITICAL 97KEV

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 5 of 6).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.74067 Published 2019-07-16 No fix listed CWE-78

TI-2019-09728 CVE-2019-12988 · GHSA-gp3j-hgq7-cg5g

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 71

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.42551 Published 2019-07-16 No fix listed CWE-78

TI-2019-09727 CVE-2019-12987 · GHSA-7658-v6cv-j9vp

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 71

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.42551 Published 2019-07-16 No fix listed CWE-78

TI-2019-09732 CVE-2019-12992 · GHSA-22pp-gfq3-734r

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 6 of 6).

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.48311 Published 2019-07-16 No fix listed CWE-78

TI-2019-09730 CVE-2019-12990 · GHSA-82hx-pvjj-2m99

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.39335 Published 2019-07-16 No fix listed CWE-22

TI-2019-09726 CVE-2019-12986 · GHSA-qgp9-j24q-992j

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.39544 Published 2019-07-16 No fix listed CWE-78

TI-2019-09725 CVE-2019-12985 · GHSA-3pcr-6mwc-x3p8

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have…

HIGH 69

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.39544 Published 2019-07-16 No fix listed CWE-78

TI-2018-12436 CVE-2018-17445 · GHSA-595c-jhrq-qhxf

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN…

MEDIUM 55

A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11059 Published 2018-10-23 No fix listed CWE-77

TI-2018-12439 CVE-2018-17448 · GHSA-p73q-qhqq-4f7g

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler…

MEDIUM 46

An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02204 Published 2018-10-23 No fix listed

TI-2018-12437 CVE-2018-17446 · GHSA-45hj-x6v8-2mjc

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x…

MEDIUM 46

A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01962 Published 2018-10-23 No fix listed CWE-89

TI-2018-12435 CVE-2018-17444 · GHSA-6jj8-f22v-2q52

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN…

LOW 39

A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03576 Published 2018-10-23 No fix listed CWE-22

TI-2018-03863 CVE-2018-5314 · GHSA-q654-j343-6r89

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before…

LOW 38

Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetS…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02849 Published 2018-03-01 No fix listed CWE-287

TI-2018-12438 CVE-2018-17447 · GHSA-3grx-945c-q563

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0…

LOW 37

An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01947 Published 2018-10-23 No fix listed CWE-532

TI-2019-08632 CVE-2019-11550 · GHSA-p53g-mf4j-5xxx

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.

LOW 27

Citrix SD-WAN 10.2.x before 10.2.1 and NetScaler SD-WAN 10.0.x before 10.0.7 have Improper Certificate Validation.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00582 Published 2019-05-08 No fix listed CWE-295

Open these records in search →

Critical	87
High	154
Medium	163
Low	15
No CVSS	0