CVE-2023-4966
CISA KEV RANSOMWARE
ACT NOW
Priority: 0.00
BB Relevance:
10/100
Published: N/A
Modified: N/A
First seen: 2026-10-29
Status: pending_score
Description
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
CISA Known Exploited Vulnerability
Vendor / Product
Citrix — NetScaler ADC and NetScaler Gateway
Date Added
2023-10-18
Remediation Due
2023-11-08
Ransomware Use
CONFIRMED
https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/, https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967 ; https://nvd.nist.gov/vuln/detail/CVE-2023-4966
Weakness Classification (1)
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| citrix | netscaler_application_delivery_controller | 12.1 – 12.1-55.300 |
| citrix | netscaler_application_delivery_controller | 12.1 – 12.1-55.300 |
| citrix | netscaler_application_delivery_controller | 13.0 – 13.0-92.19 |
| citrix | netscaler_application_delivery_controller | 13.1 – 13.1-37.164 |
| citrix | netscaler_application_delivery_controller | 13.1 – 13.1-49.15 |
| citrix | netscaler_application_delivery_controller | 14.1 – 14.1-8.50 |
| citrix | netscaler_gateway | 13.0 – 13.0-92.19 |
| citrix | netscaler_gateway | 13.1 – 13.1-49.15 |
| citrix | netscaler_gateway | 14.1 – 14.1-8.50 |
References & Advisories (3)
Vendor Advisory
US Government Resource
Third Party Advisory
VDB Entry