Citrix
27 vulnerabilities in Citrix products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2026-88779 | Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 4 Oct 2026 | 7 Oct 2026 | Unknown |
| CVE-2026-88771 | Citrix | NetScaler | Citrix NetScaler Improper Input Validation Vulnerability | 27 Sep 2026 | 30 Sep 2026 | Unknown |
| CVE-2026-88772 | Citrix | NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 27 Sep 2026 | 30 Sep 2026 | Unknown |
| CVE-2026-19490 | Citrix | NetScaler | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 9 Sep 2026 | 12 Sep 2026 | Unknown |
| CVE-2026-8452 | Citrix | NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 26 Aug 2026 | 29 Aug 2026 | Unknown |
| CVE-2026-3055 | Citrix | NetScaler | Citrix NetScaler Out-of-Bounds Read Vulnerability | 30 Mar 2026 | 2 Apr 2026 | Unknown |
| CVE-2025-7775 | Citrix | NetScaler | Citrix NetScaler Memory Overflow Vulnerability | 26 Aug 2025 | 28 Aug 2025 | Unknown |
| CVE-2024-8068 | Citrix | Session Recording | Citrix Session Recording Improper Privilege Management Vulnerability | 25 Aug 2025 | 15 Sep 2025 | Unknown |
| CVE-2024-8069 | Citrix | Session Recording | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | 25 Aug 2025 | 15 Sep 2025 | Unknown |
| CVE-2025-5777 | Citrix | NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | 10 Jul 2025 | 11 Jul 2025 | Known |
| CVE-2025-6543 | Citrix | NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | 30 Jun 2025 | 21 Jul 2025 | Unknown |
| CVE-2023-6548 | Citrix | NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 17 Jan 2024 | 24 Jan 2024 | Unknown |
| CVE-2023-6549 | Citrix | NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 17 Jan 2024 | 7 Feb 2024 | Unknown |
| CVE-2023-4966 | Citrix | NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 18 Oct 2023 | 8 Nov 2023 | Known |
| CVE-2023-24489 | Citrix | Content Collaboration | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 16 Aug 2023 | 6 Sep 2023 | Unknown |
| CVE-2023-3519 | Citrix | NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 19 Jul 2023 | 9 Aug 2023 | Known |
| CVE-2022-27518 | Citrix | Application Delivery Controller (ADC) and Gateway | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 13 Dec 2022 | 3 Jan 2023 | Unknown |
| CVE-2017-6316 | Citrix | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | Citrix Multiple Products Remote Code Execution Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2019-12989 | Citrix | SD-WAN and NetScaler | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2019-12991 | Citrix | SD-WAN and NetScaler | Citrix SD-WAN and NetScaler Command Injection Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Unknown |
| CVE-2021-22941 | Citrix | ShareFile | Citrix ShareFile Improper Access Control Vulnerability | 25 Mar 2022 | 15 Apr 2022 | Known |
| CVE-2019-11634 | Citrix | Workspace Application and Receiver for Windows | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2019-13608 | Citrix | StoreFront Server | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2019-19781 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2020-8193 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-8195 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |
| CVE-2020-8196 | Citrix | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 3 Nov 2021 | 3 May 2022 | Unknown |