Citrix
27 CVEs in CISA KEV — 7 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2023-4966 |
NetScaler ADC and NetScaler Gateway | — | 1.0000 | 2023-10-18 | 2023-11-08 | RW | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerabili |
CVE-2025-5777 |
NetScaler ADC and Gateway | — | 0.9997 | 2025-07-10 | 2025-07-11 | RW | Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due |
CVE-2023-3519 |
NetScaler ADC and NetScaler Gateway | — | 0.9975 | 2023-07-19 | 2023-08-09 | RW | Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerabili |
CVE-2023-24489 |
Content Collaboration | — | 0.9734 | 2023-08-16 | 2023-09-06 | Citrix Content Collaboration contains an improper access control vulnerability t | |
CVE-2026-3055 |
NetScaler | — | 0.9149 | 2026-03-30 | 2026-04-02 | Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix G | |
CVE-2026-88771 |
NetScaler | — | 0.8216 | 2026-09-27 | 2026-09-30 | Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation | |
CVE-2026-88772 |
NetScaler | — | 0.7816 | 2026-09-27 | 2026-09-30 | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of op | |
CVE-2023-6549 |
NetScaler ADC and NetScaler Gateway | — | 0.5763 | 2024-01-17 | 2024-02-07 | Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerabili | |
CVE-2026-19490 |
NetScaler | 9.3 | 0.3265 | 2026-09-09 | 2026-09-12 | Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vuln | |
CVE-2024-8069 |
Session Recording | — | 0.2109 | 2025-08-25 | 2025-09-15 | Citrix Session Recording contains a deserialization of untrusted data vulnerabil | |
CVE-2025-7775 |
NetScaler | — | 0.2067 | 2025-08-26 | 2025-08-28 | Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerabili | |
CVE-2026-88779 |
NetScaler | — | 0.1139 | 2026-10-04 | 2026-10-07 | Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerl | |
CVE-2025-6543 |
NetScaler ADC and Gateway | — | 0.1043 | 2025-06-30 | 2025-07-21 | Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading | |
CVE-2022-27518 |
Application Delivery Controller (ADC) and Gateway | — | 0.0686 | 2022-12-13 | 2023-01-03 | Citrix Application Delivery Controller (ADC) and Gateway, when configured with S | |
CVE-2024-8068 |
Session Recording | — | 0.0348 | 2025-08-25 | 2025-09-15 | Citrix Session Recording contains an improper privilege management vulnerability | |
CVE-2023-6548 |
NetScaler ADC and NetScaler Gateway | — | 0.0319 | 2024-01-17 | 2024-01-24 | Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerabilit | |
CVE-2026-8452 |
NetScaler ADC and NetScaler Gateway | — | 0.0101 | 2026-08-26 | 2026-08-29 | Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of op | |
CVE-2021-22941 |
ShareFile | — | — | 2022-03-25 | 2022-04-15 | RW | Improper Access Control in Citrix ShareFile storage zones controller may allow a |
CVE-2019-12991 |
SD-WAN and NetScaler | — | — | 2022-03-25 | 2022-04-15 | Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN | |
CVE-2019-12989 |
SD-WAN and NetScaler | — | — | 2022-03-25 | 2022-04-15 | Citrix SD-WAN and NetScaler SD-WAN allow SQL Injection. | |
CVE-2017-6316 |
NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | — | — | 2022-03-25 | 2022-04-15 | A vulnerability has been identified in the management interface of Citrix NetSca | |
CVE-2019-13608 |
StoreFront Server | — | — | 2021-11-03 | 2022-05-03 | RW | Citrix StoreFront Server contains an XML External Entity (XXE) processing vulner |
CVE-2020-8193 |
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | — | — | 2021-11-03 | 2022-05-03 | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models co | |
CVE-2020-8195 |
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | — | — | 2021-11-03 | 2022-05-03 | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models co | |
CVE-2020-8196 |
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | — | — | 2021-11-03 | 2022-05-03 | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models co | |
CVE-2019-19781 |
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | — | — | 2021-11-03 | 2022-05-03 | RW | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models co |
CVE-2019-11634 |
Workspace Application and Receiver for Windows | — | — | 2021-11-03 | 2022-05-03 | RW | Citrix Workspace Application and Receiver for Windows contains remote code execu |