Read the docs

Citrix

Records419All Threatist records
Exploited (KEV)29In CISA KEV
CVSS critical87CVSS 9.0–10.0
CVSS high154CVSS 7.0–8.9

Exploited now

Citrix records in CISA KEV
TI-2026-67510 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-10-04TI-2026-60194 Citrix NetScaler Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-60195 Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 100KEV 2026-09-27TI-2026-15872 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Priority CRITICAL 99KEV 2026-09-09TI-2026-07427 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Priority CRITICAL 95KEV 2026-08-26TI-2026-02639 Citrix NetScaler Out-of-Bounds Read Vulnerability Priority CRITICAL 99KEV 2026-03-30

Components

Products in the NVD configurations · select one to filter the records
Xenserver 50 records HIGH Netscaler Gateway 42 records CRITICAL Netscaler Application Delivery Controller 40 records CRITICAL Netscaler Gateway Firmware 31 records CRITICAL Application Delivery Controller Firmware 30 records CRITICAL Netscaler Application Delivery Controller Firmware 29 records MEDIUM Xenmobile Server 22 records MEDIUM Gateway 19 records HIGH

Records

14 records in Workspace · all components

TI-2020-06625 CVE-2020-8207 · GHSA-4qr3-p83g-c72j

Improper access control in Citrix Workspace App for Windows

Priority MEDIUM 42

Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02062 Published 2020-07-24 No fix listed CWE-284
TI-2021-05768 CVE-2021-22907 · GHSA-j68c-rj4v-fjjr

Improper access control in Citrix Workspace App for Windows

Priority LOW 34

An improper access control vulnerability exists in Citrix Workspace App for Windows potentially allows privilege escalation in CR versions prior to 2105 and 1912 LTSR prior to CU4.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00239 Published 2021-05-27 No fix listed CWE-284
TI-2022-06196 CVE-2022-21825 · GHSA-jhfm-vpj4-vj2f

Improper access control in Citrix Workspace App for Linux

Priority LOW 33

An Improper Access Control vulnerability exists in Citrix Workspace App for Linux 2012 - 2111 with App Protection installed that can allow an attacker to perform local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00223 Published 2022-02-09 No fix listed CWE-284
TI-2024-28400 CVE-2024-42423 · GHSA-8g2h-4x5w-4v4p

Incorrect authorization in Dell Wyse Proprietary OS

Priority LOW 30

Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00153 Published 2024-09-10 No fix listed CWE-863
TI-2024-07313 CVE-2024-7890 · GHSA-p7wm-h6q7-mx95

Improper privilege management in Citrix Workspace app for Windows

Priority LOW 26

Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00176 Published 2024-09-11 Fixed in 2405, 2402 LTSR CU1 CWE-269
TI-2023-10107 CVE-2023-24486 · GHSA-wjqh-799v-63vh

Improper access control in Citrix Workspace app for Linux

Priority LOW 24

A vulnerability has been identified in Citrix Workspace app for Linux that, if exploited, may result in a malicious local user being able to gain access to the Citrix Virtual Apps and Desktops session of another user who…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00185 Published 2023-07-10 Fixed in 2302 CWE-284
Open these records in search →