Citrix Application Delivery Controller vulnerabilities

• citrix netscaler, netscaler gateway, netscaler adc +2 more +4 more Memory overflow vulnerability leading to Denial of Service CVE-2026-88779 In KEV EPSS 11.4% 8.7 HighOctober 4, 2026
• citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 more TCP Initial Sequence Number (ISN) prediction CVE-2026-88778 Public exploit 8.8 HighSeptember 27, 2026
• citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 more Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service CVE-2026-88777 Public exploit 8.8 HighSeptember 27, 2026
• citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 more Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service CVE-2026-88776 Public exploit 8.8 HighSeptember 27, 2026
• citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 more Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service CVE-2026-88775 Public exploit 8.8 HighSeptember 27, 2026
• citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 more HTTP Request Smuggling CVE-2026-88773 Public exploit 9.3 CriticalSeptember 27, 2026
• citrix netscaler gateway, citrix netscaler adc, gateway +1 more +3 more Feature policy bypass due to improper HTTP URL based expression usage CVE-2026-88774 Public exploit 7.0 HighSeptember 27, 2026
• citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 more Memory overflow vulnerability leading to Remote Code Execution or Denial of Service CVE-2026-88772 In KEVPublic exploit EPSS 76.6% 9.5 CriticalSeptember 27, 2026
• citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 more A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands CVE-2026-88771 In KEVPublic exploit EPSS 81.9% 9.5 CriticalSeptember 27, 2026
• citrix netscaler, netscaler gateway, netscaler adc +2 more +4 more NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 CVE-2026-19490 In KEVPublic exploit EPSS 32.7% 9.3 CriticalAugust 19, 2026
• citrix netscaler gateway, netscaler adc, gateway +1 more +3 more Denial of service via malformed HTTP/2 requests CVE-2026-13474 8.7 HighJune 30, 2026
• citrix netscaler gateway, netscaler adc, gateway +1 more +3 more Insufficient input validation leading to memory overread CVE-2026-10817 Public exploit 6.9 MediumJune 30, 2026
• citrix netscaler gateway, netscaler adc, gateway +1 more +3 more Arbitrary File Read (Unauthenticated) CVE-2026-10816 7.1 HighJune 30, 2026
• citrix netscaler gateway, netscaler adc, gateway +1 more +3 more Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service CVE-2026-8655 8.8 HighJune 30, 2026
• citrix netscaler adc and netscaler gateway, netscaler gateway, netscaler adc +2 more +4 more Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service CVE-2026-8452 In KEVPublic exploit 8.8 HighJune 30, 2026
• citrix netscaler gateway, netscaler adc, gateway +1 more +3 more Insufficient input validation leading to memory overread CVE-2026-8451 Public exploit EPSS 14.2% 8.8 HighJune 30, 2026
• citrix netscaler, netscaler gateway, netscaler adc +2 more +4 more Insufficient input validation leading to memory overread CVE-2026-3055 In KEVPublic exploit EPSS 91.5% 9.3 CriticalMarch 23, 2026
• citrix netscaler gateway, netscaler adc, gateway +1 more +3 more Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service CVE-2025-7776 8.8 HighAugust 26, 2025
• citrix netscaler, netscaler gateway, netscaler adc +2 more +4 more Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service CVE-2025-7775 In KEVPublic exploit EPSS 20.7% 9.2 CriticalAugust 26, 2025
• citrix netscaler gateway, netscaler adc, gateway +2 more +4 more Memory overflow vulnerability leading to unintended control flow and Denial of Service CVE-2025-6543 In KEVPublic exploit EPSS 10.4% 9.2 CriticalJune 25, 2025
• citrix netscaler gateway, netscaler adc, citrix netscaler application delivery controller +2 more NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface CVE-2025-5349 Public exploit 8.7 HighJune 17, 2025
• citrix netscaler gateway, netscaler adc, gateway +2 more +4 more NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread CVE-2025-5777 In KEVPublic exploit EPSS 100.0% 9.3 CriticalJune 17, 2025
• citrix netscaler adc, netscaler gateway, netscaler adc +2 more +4 more Authenticated user can access unintended user capabilities CVE-2024-8535 5.8 MediumNovember 12, 2024
• citrix netscaler adc, netscaler adc, gateway +5 more +7 more Memory safety vulnerability leading to memory corruption and Denial of Service CVE-2024-8534 8.4 HighNovember 12, 2024
• citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 more Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites CVE-2024-5492 5.1 MediumJuly 10, 2024
• citrix netscaler adc, netscaler gateway, netscaler adc +2 more +4 more Denial of Service CVE-2024-5491 7.2 HighJuly 10, 2024
• citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Denial of Service CVE-2023-6549 In KEV EPSS 57.6% 8.2 HighJanuary 17, 2024
• citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more [PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to ... CVE-2023-6548 In KEV 5.5 MediumJanuary 17, 2024
• citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 more Denial of service CVE-2023-4967 8.2 HighOctober 27, 2023
• citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Unauthenticated sensitive information disclosure CVE-2023-4966 In KEVPublic exploit EPSS 100.0% 9.4 CriticalOctober 10, 2023
• citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 more Privilege Escalation to root administrator (nsroot) CVE-2023-3467 8.0 HighJuly 19, 2023
• citrix netscaler adc, netscaler gateway, netscaler application delivery controller +2 more Reflected Cross-Site Scripting (XSS) CVE-2023-3466 8.3 HighJuly 19, 2023
• citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Unauthenticated remote code execution CVE-2023-3519 In KEVPublic exploit EPSS 99.7% 9.8 CriticalJuly 19, 2023
• citrix adc and citrix gateway, gateway, application delivery controller +2 more Arbitrary file read CVE-2023-24487 6.3 MediumJuly 10, 2023
• citrix adc and citrix gateway, gateway, application delivery controller +2 more Cross site scripting CVE-2023-24488 Public exploit EPSS 81.2% 6.1 MediumJuly 10, 2023
• citirx citrix application delivery controller (citrix adc) and citrix gateway, citrix application delivery controller, gateway +2 more Unauthenticated denial of service CVE-2022-27508 7.5 HighJanuary 24, 2023
• citirx citrix application delivery controller (citrix adc) and citrix gateway, citrix application delivery controller, gateway +2 more Authenticated denial of service CVE-2022-27507 6.5 MediumJanuary 24, 2023
• citrix gateway, application delivery controller firmware +1 more In certain Citrix products, information disclosure can be achieved by an authenticated VPN user... CVE-2019-18177 6.5 MediumDecember 26, 2022
• citrix application delivery controller (adc) and gateway, application delivery controller firmware, gateway, citrix adc +1 more +3 more Unauthenticated remote arbitrary code execution CVE-2022-27518 In KEVPublic exploit 9.8 CriticalDecember 13, 2022
• citrix application delivery controller firmware, gateway, citrix adc, gateway +2 more User login brute force protection functionality bypass CVE-2022-27516 5.3 MediumNovember 8, 2022
• citrix gateway, application delivery controller firmware, gateway, citrix adc +2 more Unauthorized access to Gateway user capabilities CVE-2022-27510 9.8 CriticalNovember 8, 2022
• citrix application delivery controller firmware, gateway, citrix adc, gateway +2 more Remote desktop takeover via phishing CVE-2022-27513 8.3 HighNovember 8, 2022
• citirx citrix application delivery management (citrix adc) and citrix gateway, citrix application delivery controller firmware, gateway +2 more Unauthenticated redirection to a malicious website CVE-2022-27509 6.1 MediumJuly 28, 2022
• citrix application delivery controller firmware, gateway, sd-wan +2 more An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22... CVE-2021-22956 7.5 HighDecember 7, 2021
• citrix gateway, application delivery controller firmware +1 more A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22... CVE-2021-22955 7.5 HighDecember 7, 2021
• citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 more A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix... CVE-2021-22919 7.5 HighAugust 5, 2021
• citrix gateway, application delivery controller firmware, netscaler gateway +2 more A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when... CVE-2021-22927 8.1 HighAugust 5, 2021
• citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 more Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix... CVE-2020-8299 6.5 MediumJune 16, 2021
• citrix gateway, netscaler gateway, application delivery controller firmware +2 more Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC... CVE-2020-8300 Public exploit 6.5 MediumJune 16, 2021
• citrix gateway, netscaler gateway, sd-wan wanop +1 more +3 more Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1... CVE-2020-8247 8.8 HighSeptember 18, 2020
• Show olderLoading…