CVE-2023-4966
Unauthenticated sensitive information disclosure
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Unauthenticated sensitive information disclosure
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- Record
CVE-2023-4966- CVSS 3.1
- 9.4 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
EUVDEUVD-2023-54802
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- Record
EUVD-2023-54802- CVSS 3.1
- 9.4 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-2g42-2pwg-93cj
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a...
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA ?virtual?server.
- Record
GHSA-2g42-2pwg-93cj- CVSS 3.1
- 9.4 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - Weakness
- CWE-119
- Updated
- 2026-11-02
CISA KEV No score
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- Record
CVE-2023-4966- Weakness
- CWE-119
- Updated
- 2026-11-02
NVD
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- Record
CVE-2023-4966- CVSS 3.1
- 9.4 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | Chocapikk/CVE-2023-4966 | 2023-10-24 |
| PoC in GitHub | IceBreakerCode/CVE-2023-4966 | 2023-10-25 |
| PoC in GitHub | dinosn/citrix_cve-2023-4966 | 2023-10-25 |
| PoC in GitHub | mlynchcogent/CVE-2023-4966-POC | 2023-10-25 |
| PoC in GitHub | 0xKayala/CVE-2023-4966 | 2023-10-27 |
| PoC in GitHub | certat/citrix-logchecker | 2023-10-28 |
| PoC in GitHub | RevoltSecurities/CVE-2023-4966 | 2023-10-29 |
| PoC in GitHub | s-bt/CVE-2023-4966 | 2023-11-20 |
| PoC in GitHub | byte4RR4Y/CVE-2023-4966 | 2023-11-27 |
| PoC in GitHub | jmussmann/cve-2023-4966-iocs | 2023-12-08 |
Show 6 moreShow less
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | morganwdavis/overread | 2023-12-16 |
| PoC in GitHub | LucasOneZ/CVE-2023-4966 | 2024-09-09 |
| PoC in GitHub | akshthejo/CVE-2023-4966-exploit | 2024-12-18 |
| PoC in GitHub | vignesh-hp/LockBit-Ransomware-Analysis | 2026-02-25 |
| Metasploit | Citrix ADC (NetScaler) Bleed Scanner | 2023-10-25 |
| Nuclei | Citrix Bleed - Leaking Session Tokens |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-4966 is a critical vulnerability (CVSS 9.4) in Citrix Netscaler Adc, published October 10, 2023. CISA lists it as known to be exploited, since October 18, 2023. EUVD reports exploitation since October 18, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. No source names a fixed version.