Vulnerabilities

Filters

Reset all

2 selected

40 records

Sort

Vendor: Citrix Component: Netscaler Application Delivery Controller Clear all filters

TI-2026-67510 CVE-2026-88779 · GHSA-56r3-m27m-8p62

Memory overflow vulnerability leading to Denial of Service

CRITICAL 95KEV

Vulnerability in NetScaler ADC and NetScaler Gateway.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.11388 Published 2026-10-04 Fixed in 14.1-73.41, 13.1-64.28 +2 CWE-119

TI-2026-60201 CVE-2026-88778 · GHSA-mh3h-4j34-54mr

TCP Initial Sequence Number (ISN) prediction

MEDIUM 47

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00694 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-342

TI-2026-60200 CVE-2026-88777 · GHSA-wm5f-p8pr-c4v4

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

MEDIUM 45

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00719 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-119

TI-2026-60199 CVE-2026-88776 · GHSA-whfq-j52q-fpq7

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

MEDIUM 46

Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00834 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-119

TI-2026-60198 CVE-2026-88775 · GHSA-pfp6-v654-4qvc

Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

MEDIUM 45

Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00719 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-120

TI-2026-60196 CVE-2026-88773 · GHSA-9x87-2c36-ffjf

HTTP Request Smuggling

MEDIUM 52

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03081 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-444

TI-2026-60197 CVE-2026-88774 · GHSA-m373-fcf4-9cxv

Feature policy bypass due to improper HTTP URL based expression usage

LOW 31

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0HIGH 7.0 Network No auth No interaction EPSS 0.00395 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-20

TI-2026-60195 CVE-2026-88772 · GHSA-h5xm-pf48-4c32

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

CRITICAL 100KEV

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.76566 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-119

TI-2026-60194 CVE-2026-88771 · GHSA-mx58-p288-86qp

Improper input validation in Citrix ADC

CRITICAL 100KEV

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.81894 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-20

TI-2026-15872 CVE-2026-19490 · GHSA-7c6h-rhhv-wm8r

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

CRITICAL 99KEV

Vulnerability in NetScaler ADC and NetScaler Gateway.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.32653 Published 2026-08-19 No fix listed CWE-288

TI-2026-11401 CVE-2026-13474 · GHSA-256v-mmj4-qqjc

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetSca…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00556 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-401

TI-2026-09285 CVE-2026-10817 · GHSA-jmh3-rwcx-284r

Out-of-bounds read in Citrix ADC

LOW 37

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the servic…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0056 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-125

TI-2026-09284 CVE-2026-10816 · GHSA-jxcr-w9q6-gmhx

Arbitrary file read (Unauthenticated) in Citrix ADC

LOW 32

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00578 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-73

TI-2026-07604 CVE-2026-8655 · GHSA-rw96-6cvj-x57v

Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service

MEDIUM 45

Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00631 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-119

TI-2026-07427 CVE-2026-8452 · GHSA-r7wg-r5wj-c765

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

CRITICAL 95KEV

Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.01011 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-119

TI-2026-07426 CVE-2026-8451 · GHSA-6659-v5cc-894x

Insufficient input validation leading to memory overread

MEDIUM 61

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.1424 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-125

TI-2026-02639 CVE-2026-3055 · GHSA-wv7p-q4p2-p6pf

Insufficient input validation leading to memory overread

CRITICAL 99KEV

Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.91491 Published 2026-03-23 Fixed in 66.59, 62.23 +1 CWE-125

TI-2025-07101 CVE-2025-7776 · GHSA-rppg-589c-3659

Memory corruption in Citrix ADC

MEDIUM 56

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RD…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.09143 Published 2025-08-26 Fixed in 47.48, 59.22 +2 CWE-119

TI-2025-07100 CVE-2025-7775 · GHSA-2m4h-vp37-6746

Memory corruption in Citrix ADC

CRITICAL 99KEV

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or A…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.2067 Published 2025-08-26 Fixed in 47.48, 59.22 +2 CWE-119

TI-2025-05943 CVE-2025-6543 · GHSA-9gqr-6728-fpv3

Memory corruption in Citrix ADC

CRITICAL 99KEV

Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual ser…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.10433 Published 2025-06-25 Fixed in 47.46, 59.19 +1 CWE-119

TI-2025-04803 CVE-2025-5349 · GHSA-927h-58v2-fqv5

NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

MEDIUM 49

Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

CVSS 4.0HIGH 8.7 Adjacent network No auth No interaction EPSS 0.06598 Published 2025-06-17 Fixed in 43.56, 58.32 CWE-1284

TI-2025-05207 CVE-2025-5777 · GHSA-29vj-j5w5-pcph

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

CRITICAL 99KEV

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.99972 Published 2025-06-17 Fixed in 43.56, 58.32 CWE-125

TI-2024-07912 CVE-2024-8535 · GHSA-8xqq-wrhg-93q9

Authenticated user can access unintended user capabilities

LOW 28

Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for K…

CVSS 4.0MEDIUM 5.8 Network Low privileges No interaction EPSS 0.0042 Published 2024-11-12 Fixed in 29.72, 55.34 +2 CWE-552

TI-2024-07911 CVE-2024-8534 · GHSA-33mv-fjxj-2mx6

Memory corruption in Citrix NetScaler ADC

MEDIUM 43

Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be…

CVSS 4.0HIGH 8.4 Network No auth No interaction EPSS 0.00559 Published 2024-11-12 Fixed in 29.72, 55.34 +2 CWE-119

TI-2024-05103 CVE-2024-5492 · GHSA-wj5r-m28j-95q9

Open redirect in Citrix NetScaler ADC

LOW 30

Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00552 Published 2024-07-10 Fixed in 25.53, 53.17 +3 CWE-601