Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

419 records

Vendor: Citrix Clear all filters
TI-2026-73745 CVE-2026-53564 · GHSA-m79h-7jrq-gcwj

Path traversal in Citrix UniconOS allows arbitrary file read and write

Priority LOW 23

Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.

CVSS 4.0MEDIUM 5.1 Adjacent network No auth User interaction EPSS 0.00397 Published 2026-10-13 Fixed in 2607.2 CR, 2603 LTSR CU2 CWE-22
TI-2026-73744 CVE-2026-53563 · GHSA-jq59-m47r-c584

Persistent command execution in Citrix UniconOS

Priority LOW 30

Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.0026 Published 2026-10-13 Fixed in 2607.2 CR, 2603 LTSR CU2 CWE-78
TI-2026-73736 CVE-2026-84420 · GHSA-48h6-7293-hxh6

Out-of-bounds read in Citrix Workspace app for Windows

Priority LOW 25

Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00113 Published 2026-10-13 Fixed in 2603.20 CR, LTSR 2607 +1 CWE-125
TI-2026-73735 CVE-2026-84419 · GHSA-qw7v-gw84-qm4v

Out-of-bounds write in Citrix Workspace app for Windows

Priority LOW 29

Out-of-bounds write vulnerability in Citrix Workspace app for Windows.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00134 Published 2026-10-13 Fixed in 2603.20 CR, LTSR 2607 Hotfix 1 +1 CWE-787
TI-2026-69770 CVE-2026-107406 · GHSA-x62m-6223-4vq2

Memory overflow in NetScaler ADC and Gateway allows code execution

Priority MEDIUM 47

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.01874 Published 2026-10-08 Fixed in 14.1-73.46, 13.1-64.29 +2 CWE-119
TI-2026-60201 CVE-2026-88778 · GHSA-mh3h-4j34-54mr

TCP Initial Sequence Number (ISN) prediction

Priority MEDIUM 47

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00694 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-342
TI-2026-60196 CVE-2026-88773 · GHSA-9x87-2c36-ffjf

HTTP Request Smuggling

Priority MEDIUM 52

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03081 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-444
TI-2026-60194 CVE-2026-88771 · GHSA-mx58-p288-86qp

Improper input validation in Citrix ADC

Priority CRITICAL 100KEV

Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

CVSS 4.0CRITICAL 9.5 Network No auth No interaction EPSS 0.81894 Published 2026-09-27 Fixed in 14.1-73.37, 13.1-64.23 +2 CWE-20
TI-2026-54616 CVE-2026-78546 · GHSA-gccg-q69r-mpxp

Out-of-bounds read in Citrix Workspace app for Windows

Priority LOW 21

Out-of-bounds read vulnerability in Citirx Workspace app for Windows.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00139 Published 2026-09-11 Fixed in 2603.11 Current Release (CR), 2507.1 LTSR CU3 +1 CWE-125
TI-2026-54617 CVE-2026-78547 · GHSA-cmf8-hqjg-89gj

Out-of-bounds write in Citrix Workspace app for Windows

Priority LOW 19

Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.

CVSS 4.0MEDIUM 4.4 Physical Low privileges No interaction EPSS 0.00147 Published 2026-09-11 Fixed in 2603.11 Current Release (CR), 2507.1 LTSR CU3 +1 CWE-787
TI-2026-15871 CVE-2026-19489 · GHSA-8jq9-gg9v-58rv

Buffer overflow in Citrix ADC

Priority MEDIUM 44

Vulnerability in NetScaler ADC and NetScaler Gateway.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00428 Published 2026-08-19 No fix listed CWE-120
TI-2026-11401 CVE-2026-13474 · GHSA-256v-mmj4-qqjc

Memory leak in Citrix ADC

Priority MEDIUM 44

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetSca…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00556 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-401
TI-2026-09285 CVE-2026-10817 · GHSA-jmh3-rwcx-284r

Out-of-bounds read in Citrix ADC

Priority LOW 37

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the servic…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0056 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-125
TI-2026-09284 CVE-2026-10816 · GHSA-jxcr-w9q6-gmhx

Arbitrary file read (Unauthenticated) in Citrix ADC

Priority LOW 32

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00578 Published 2026-06-30 Fixed in 72.61, 63.18 +1 CWE-73
Load more