Citrix
Vulnerability activity for Citrix: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 1
- With exploit code
- 0
Last 90 days
- CVEs
- 9
- Critical (CVSS 9+)
- 3
- Exploited (CISA KEV)
- 5
- With exploit code
- 3
Last 365 days
- CVEs
- 11
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 6
- With exploit code
- 4
Exploited now
CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.
- 8.7HighOct 4, 2026Citrix NetScaler Memory corruptionCVE-2026-88779Citrix NetScaler An attacker gains unauthorized access to sensitive data and system functionality. Patch the affected Citrix NetScaler system with the latest available update.Added to KEV Oct 4, 2026Exploited
- 9.5CriticalSep 27, 2026Citrix NetScaler Memory corruptionCVE-2026-88771Citrix NetScaler appliances are affected. An attacker gains remote code execution and arbitrary file access. Patch the Citrix NetScaler appliances with the latest security updates.Added to KEV Sep 27, 2026Exploited1.1% likelyExploit codeMetasploitDetection
- 9.5CriticalSep 27, 2026Citrix NetScaler Memory corruptionCVE-2026-88772Citrix NetScaler ADC and Gateway appliances are affected. An attacker gains remote code execution, potentially leading to full system compromise. Apply Citrix NetScaler ADC and Gateway Update Rollup 8 or later to mitigate the vulnerability.Added to KEV Sep 27, 2026Exploited1.3% likelyExploit codeMetasploit
- 9.3CriticalSep 9, 2026Citrix NetScaler Auth bypass / access controlCVE-2026-19490Affected: Citrix NetScaler Gateway versions 13.0-51.14 and prior. Attacker gains: Ability to bypass authentication and gain unauthorized access to the system. Recommended action: Apply Citrix NetScaler Gateway version 13.0-51.15 or later.Added to KEV Sep 9, 2026Exploited23% likelyExploit code
- 8.8HighAug 26, 2026Citrix NetScaler ADC and NetScaler Gateway Memory corruptionCVE-2026-8452Affected: Citrix NetScaler ADC and NetScaler Gateway appliances. Attacker gains: Remote code execution. Recommended action: Apply Citrix patches and ensure all systems are up-to-date.Added to KEV Aug 26, 2026Exploited1% likelyDetection
- 9.3CriticalMar 30, 2026Citrix NetScaler Memory corruptionCVE-2026-30551. Citrix NetScaler devices. 2. An attacker gains the ability to read sensitive information from the system memory. 3. Apply the latest security patches from Citrix to mitigate this vulnerability.Added to KEV Mar 30, 2026Exploited4% likelyExploit codeMetasploit · NucleiDetection
- 9.2CriticalAug 26, 2025Citrix NetScaler Memory corruptionCVE-2025-7775(1) Citrix NetScaler ADC and Gateway appliances are affected. (2) An attacker gains remote code execution and arbitrary memory access. (3) Apply Citrix NetScaler ADC and Gateway 12.2 or later, or apply the relevant patches.Added to KEV Aug 26, 2025 · same day as publicationExploited21% likely
- 5.1MediumNov 12, 2024Citrix Session Recording DeserializationCVE-2024-8069Citrix Session Recording Server is affected. An attacker gains unauthorized access to sensitive data and potentially executes arbitrary code. Update to the latest version of Citrix Session Recording Server and apply recommended security patches.Added to KEV Aug 25, 2025 · 285 days after publicationExploited21% likelyDetection
- 5.1MediumNov 12, 2024Citrix Session Recording Privilege escalationCVE-2024-8068(1) The Citrix Session Recording feature is affected, specifically the server component. (2) An attacker gains elevated privileges, allowing them to manipulate session recordings and potentially access sensitive data. (3) Apply the available patch from Citrix to mitigate the vulnerability and prevent exploitation.Added to KEV Aug 25, 2025 · 285 days after publicationExploited3.5% likely
- 9.3CriticalJun 17, 2025Citrix NetScaler ADC and Gateway Memory corruptionCVE-2025-57771. Citrix NetScaler ADC and Gateway appliances are affected. 2. An attacker gains access to sensitive data and potentially executes arbitrary code. 3. Apply Citrix NetScaler ADC and Gateway 12.1 build 58.18 or later to mitigate the vulnerability.Added to KEV Jul 10, 2025 · 22 days after publicationExploited100% likelyExploit codeExploit-DB · NucleiDetection
- 9.2CriticalJun 25, 2025Citrix NetScaler ADC and Gateway Memory corruptionCVE-2025-6543Citrix NetScaler ADC and Gateway. Unauthorized access to sensitive data and execution of arbitrary code. Update to the latest version of Citrix NetScaler ADC and Gateway, or apply the available patches.Added to KEV Jun 30, 2025 · 4 days after publicationExploited10% likely
- 5.5MediumJan 17, 2024Citrix NetScaler ADC and NetScaler Gateway Code / command injectionCVE-2023-6548(1) Citrix NetScaler ADC and NetScaler Gateway appliances are affected. (2) An attacker gains code injection capabilities, potentially leading to arbitrary code execution. (3) Apply the latest available patches or upgrade to a supported version of Citrix NetScaler ADC and NetScaler Gateway.Added to KEV Jan 17, 2024 · same day as publicationExploited3.2% likely
- 8.2HighJan 17, 2024Citrix NetScaler ADC and NetScaler Gateway Memory corruptionCVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway. An attacker gains arbitrary code execution and remote code execution. Update to the latest version of Citrix NetScaler ADC and NetScaler Gateway.Added to KEV Jan 17, 2024 · same day as publicationExploited58% likelyExploit codeNucleiDetection
- 9.4CriticalOct 10, 2023Citrix NetScaler ADC and NetScaler Gateway Memory corruptionCVE-2023-49661. Citrix NetScaler ADC and NetScaler Gateway appliances are affected. 2. An attacker gains arbitrary code execution and system compromise. 3. Apply Citrix patches and update NetScaler ADC and Gateway to the latest version.Added to KEV Oct 18, 2023 · 7 days after publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalJul 10, 2023Citrix ShareFile Storage Zones Controller Auth bypass / access controlCVE-2023-24489A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.Added to KEV Aug 16, 2023 · 36 days after publicationExploited97% likelyExploit codeNucleiDetection
- 9.8CriticalJul 19, 2023Citrix NetScaler ADC and NetScaler Gateway Code / command injectionCVE-2023-3519Affected: Citrix NetScaler ADC and NetScaler Gateway appliances. Attacker gains: Arbitrary code execution with elevated privileges. Recommended action: Apply Citrix NetScaler ADC and NetScaler Gateway patches (CU 11.1.56.37 or later) and restrict access to administrative interfaces.Added to KEV Jul 19, 2023 · same day as publicationExploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalDec 13, 2022Citrix Application Delivery Controller (ADC) and Gateway Auth bypass / access controlCVE-2022-27518Citrix Application Delivery Controller (ADC) and Gateway. An attacker gains unauthenticated access to sensitive data and systems. Disable the "basic authentication" feature and apply the latest security patches.Added to KEV Dec 13, 2022 · same day as publicationExploited6.9% likely
- 9.8CriticalJul 20, 2017Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server Code / command injectionCVE-2017-6316Citrix NetScaler ADC and Gateway, Citrix Gateway, Citrix Web App Firewall, and Citrix SD-WAN. An attacker gains remote code execution on the affected system. Update the affected products to the latest version available from Citrix.Added to KEV Mar 25, 2022 · 1,709 days after publicationExploited73% likelyExploit codeExploit-DBDetection
- 9.8CriticalJul 16, 2019Citrix SD-WAN and NetScaler SQL injectionCVE-2019-12989Citrix SD-WAN and NetScaler appliances. An attacker gains remote code execution and SQL injection capabilities. Patch and update Citrix SD-WAN and NetScaler appliances to the latest version.Added to KEV Mar 25, 2022 · 982 days after publicationExploited95% likelyExploit codeExploit-DB · NucleiDetection
- 8.8HighJul 16, 2019Citrix SD-WAN and NetScaler Code / command injectionCVE-2019-12991Affected: Citrix SD-WAN and NetScaler appliances. Attacker gains: Remote code execution and arbitrary file access. Recommended action: Immediately apply the available patches and update the affected Citrix SD-WAN and NetScaler appliances.Added to KEV Mar 25, 2022 · 982 days after publicationExploited74% likelyExploit codeExploit-DB
- 9.8CriticalSep 23, 2021Citrix ShareFile Auth bypass / access controlCVE-2021-229411. Citrix ShareFile web application. 2. An attacker gains elevated privileges and access to sensitive files. 3. Apply the patches released by Citrix in August 2021.Added to KEV Mar 25, 2022 · 182 days after publicationExploited54% likelyExploit codeDetection
- 9.8CriticalMay 22, 2019Citrix Workspace Application and Receiver for Windows Auth bypass / access controlCVE-2019-11634Citrix Workspace Application and Receiver for Windows are affected. An attacker gains arbitrary code execution and potentially elevated privileges. Patch the affected Citrix Workspace Application and Receiver for Windows to the latest version.Added to KEV Nov 3, 2021 · 895 days after publicationExploited8.1% likely
- 9.8CriticalDec 27, 2019Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Path traversal / file handlingCVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance. An attacker gains remote code execution and arbitrary file read/write access. Patch the affected systems with the latest available Citrix ADC, Gateway, and SD-WAN WANOP Appliance updates.Added to KEV Nov 3, 2021 · 676 days after publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 4.3MediumJul 10, 2020Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Auth bypass / access controlCVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance. An attacker gains access to sensitive information such as configuration and session details. Update to Citrix ADC and Gateway versions 13.0.38.19 and 12.1.51.16, respectively, and SD-WAN WANOP Appliance version 11.3.0.6.Added to KEV Nov 3, 2021 · 480 days after publicationExploited26% likelyExploit code
- 6.5MediumJul 10, 2020Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Information disclosureCVE-2020-8195Citrix ADC, Gateway, and SD-WAN WANOP Appliance. An attacker gains sensitive information about the appliance. Apply Citrix ADC and Gateway updates to version 13.0-51.21 or later, and for SD-WAN WANOP, update to version 11.4-41.14 or later.Added to KEV Nov 3, 2021 · 480 days after publicationExploited33% likelyExploit codeDetection
Recent
- 5.1MediumOct 13, 2026Citrix UniconOS Path traversal / file handlingCVE-2026-53564Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
- 6.9MediumOct 13, 2026Citrix UniconOS Code / command injectionCVE-2026-53563Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
- –UnscoredOct 13, 2026CitrixCVE-2026-102701
- 8.5HighOct 13, 2026Citrix UniconOS Path traversal / file handlingCVE-2026-53562Citrix UniconOS versions before 2607 CR and before 2603 LTSR CU2. An attacker gains unauthorized access to sensitive files and directories. Patch the affected systems with the latest version of Citrix UniconOS.
- 8.7HighOct 4, 2026Citrix NetScaler Memory corruptionCVE-2026-88779Citrix NetScaler An attacker gains unauthorized access to sensitive data and system functionality. Patch the affected Citrix NetScaler system with the latest available update.Exploited
- 9.5CriticalSep 27, 2026Citrix NetScaler Memory corruptionCVE-2026-88772Citrix NetScaler ADC and Gateway appliances are affected. An attacker gains remote code execution, potentially leading to full system compromise. Apply Citrix NetScaler ADC and Gateway Update Rollup 8 or later to mitigate the vulnerability.Exploited1.3% likelyExploit codeMetasploit
- 9.5CriticalSep 27, 2026Citrix NetScaler Memory corruptionCVE-2026-88771Citrix NetScaler appliances are affected. An attacker gains remote code execution and arbitrary file access. Patch the Citrix NetScaler appliances with the latest security updates.Exploited1.1% likelyExploit codeMetasploitDetection
- 9.3CriticalSep 9, 2026Citrix NetScaler Auth bypass / access controlCVE-2026-19490Affected: Citrix NetScaler Gateway versions 13.0-51.14 and prior. Attacker gains: Ability to bypass authentication and gain unauthorized access to the system. Recommended action: Apply Citrix NetScaler Gateway version 13.0-51.15 or later.Exploited23% likelyExploit code
- 8.8HighAug 26, 2026Citrix NetScaler ADC and NetScaler Gateway Memory corruptionCVE-2026-8452Affected: Citrix NetScaler ADC and NetScaler Gateway appliances. Attacker gains: Remote code execution. Recommended action: Apply Citrix patches and ensure all systems are up-to-date.Exploited1% likelyDetection
- 6.8MediumJul 14, 2026Citrix Secure Access Client for Windows Memory corruptionCVE-2026-53566Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20.
- 9.3CriticalMar 30, 2026Citrix NetScaler Memory corruptionCVE-2026-30551. Citrix NetScaler devices. 2. An attacker gains the ability to read sensitive information from the system memory. 3. Apply the latest security patches from Citrix to mitigate this vulnerability.Exploited4% likelyExploit codeMetasploit · NucleiDetection
- 9.2CriticalAug 26, 2025Citrix NetScaler Memory corruptionCVE-2025-7775(1) Citrix NetScaler ADC and Gateway appliances are affected. (2) An attacker gains remote code execution and arbitrary memory access. (3) Apply Citrix NetScaler ADC and Gateway 12.2 or later, or apply the relevant patches.Exploited21% likely
- 5.1MediumNov 12, 2024Citrix Session Recording Privilege escalationCVE-2024-8068(1) The Citrix Session Recording feature is affected, specifically the server component. (2) An attacker gains elevated privileges, allowing them to manipulate session recordings and potentially access sensitive data. (3) Apply the available patch from Citrix to mitigate the vulnerability and prevent exploitation.Exploited3.5% likely
- 5.1MediumNov 12, 2024Citrix Session Recording DeserializationCVE-2024-8069Citrix Session Recording Server is affected. An attacker gains unauthorized access to sensitive data and potentially executes arbitrary code. Update to the latest version of Citrix Session Recording Server and apply recommended security patches.Exploited21% likelyDetection
- 9.3CriticalJun 17, 2025Citrix NetScaler ADC and Gateway Memory corruptionCVE-2025-57771. Citrix NetScaler ADC and Gateway appliances are affected. 2. An attacker gains access to sensitive data and potentially executes arbitrary code. 3. Apply Citrix NetScaler ADC and Gateway 12.1 build 58.18 or later to mitigate the vulnerability.Exploited100% likelyExploit codeExploit-DB · NucleiDetection
- 9.2CriticalJun 25, 2025Citrix NetScaler ADC and Gateway Memory corruptionCVE-2025-6543Citrix NetScaler ADC and Gateway. Unauthorized access to sensitive data and execution of arbitrary code. Update to the latest version of Citrix NetScaler ADC and Gateway, or apply the available patches.Exploited10% likely
- 8.2HighJan 17, 2024Citrix NetScaler ADC and NetScaler Gateway Memory corruptionCVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway. An attacker gains arbitrary code execution and remote code execution. Update to the latest version of Citrix NetScaler ADC and NetScaler Gateway.Exploited58% likelyExploit codeNucleiDetection
- 5.5MediumJan 17, 2024Citrix NetScaler ADC and NetScaler Gateway Code / command injectionCVE-2023-6548(1) Citrix NetScaler ADC and NetScaler Gateway appliances are affected. (2) An attacker gains code injection capabilities, potentially leading to arbitrary code execution. (3) Apply the latest available patches or upgrade to a supported version of Citrix NetScaler ADC and NetScaler Gateway.Exploited3.2% likely
- 9.4CriticalOct 10, 2023Citrix NetScaler ADC and NetScaler Gateway Memory corruptionCVE-2023-49661. Citrix NetScaler ADC and NetScaler Gateway appliances are affected. 2. An attacker gains arbitrary code execution and system compromise. 3. Apply Citrix patches and update NetScaler ADC and Gateway to the latest version.Exploited100% likelyExploit codeMetasploit · NucleiDetection
- 9.8CriticalJul 10, 2023Citrix ShareFile Storage Zones Controller Auth bypass / access controlCVE-2023-24489A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.Exploited97% likelyExploit codeNucleiDetection
- 9.8CriticalJul 19, 2023Citrix NetScaler ADC and NetScaler Gateway Code / command injectionCVE-2023-3519Affected: Citrix NetScaler ADC and NetScaler Gateway appliances. Attacker gains: Arbitrary code execution with elevated privileges. Recommended action: Apply Citrix NetScaler ADC and NetScaler Gateway patches (CU 11.1.56.37 or later) and restrict access to administrative interfaces.Exploited100% likelyExploit codeMetasploit · NucleiDetection
- 6.1MediumJul 10, 2023Citrix ADC and Citrix Gateway XSSCVE-2023-24488Citrix ADC and Citrix Gateway. An attacker gains ability to inject malicious scripts. Patch Citrix ADC and Citrix Gateway with latest security updates.81% likelyExploit codeNucleiDetection
- 9.8CriticalDec 13, 2022Citrix Application Delivery Controller (ADC) and Gateway Auth bypass / access controlCVE-2022-27518Citrix Application Delivery Controller (ADC) and Gateway. An attacker gains unauthenticated access to sensitive data and systems. Disable the "basic authentication" feature and apply the latest security patches.Exploited6.9% likely
- 9.8CriticalSep 23, 2021Citrix ShareFile Auth bypass / access controlCVE-2021-229411. Citrix ShareFile web application. 2. An attacker gains elevated privileges and access to sensitive files. 3. Apply the patches released by Citrix in August 2021.Exploited54% likelyExploit codeDetection
- 8.8HighJul 16, 2019Citrix SD-WAN and NetScaler Code / command injectionCVE-2019-12991Affected: Citrix SD-WAN and NetScaler appliances. Attacker gains: Remote code execution and arbitrary file access. Recommended action: Immediately apply the available patches and update the affected Citrix SD-WAN and NetScaler appliances.Exploited74% likelyExploit codeExploit-DB
- 9.8CriticalJul 16, 2019Citrix SD-WAN and NetScaler SQL injectionCVE-2019-12989Citrix SD-WAN and NetScaler appliances. An attacker gains remote code execution and SQL injection capabilities. Patch and update Citrix SD-WAN and NetScaler appliances to the latest version.Exploited95% likelyExploit codeExploit-DB · NucleiDetection
- 9.8CriticalJul 20, 2017Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server Code / command injectionCVE-2017-6316Citrix NetScaler ADC and Gateway, Citrix Gateway, Citrix Web App Firewall, and Citrix SD-WAN. An attacker gains remote code execution on the affected system. Update the affected products to the latest version available from Citrix.Exploited73% likelyExploit codeExploit-DBDetection
- 7.5HighAug 29, 2019Citrix StoreFront ServerCVE-2019-13608Citrix StoreFront Server is affected. An attacker gains unauthorized access to sensitive data and potentially executes arbitrary code. Update to the latest version of Citrix StoreFront Server, and ensure XML security settings are properly configured.Exploited30% likelyExploit codeNucleiDetection
- 6.5MediumJul 10, 2020Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Auth bypass / access controlCVE-2020-8193Affected: Citrix ADC, Gateway, and SD-WAN WANOP Appliance. Attacker gains: Unauthorized access to sensitive data and administrative functions. Recommended action: Apply Citrix ADC, Gateway, and SD-WAN WANOP Appliance patches or updates as soon as possible.Exploited88% likelyExploit codeNucleiDetection
- 6.5MediumJul 10, 2020Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Information disclosureCVE-2020-8195Citrix ADC, Gateway, and SD-WAN WANOP Appliance. An attacker gains sensitive information about the appliance. Apply Citrix ADC and Gateway updates to version 13.0-51.21 or later, and for SD-WAN WANOP, update to version 11.4-41.14 or later.Exploited33% likelyExploit codeDetection
- 4.3MediumJul 10, 2020Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Auth bypass / access controlCVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance. An attacker gains access to sensitive information such as configuration and session details. Update to Citrix ADC and Gateway versions 13.0.38.19 and 12.1.51.16, respectively, and SD-WAN WANOP Appliance version 11.3.0.6.Exploited26% likelyExploit code
- 9.8CriticalDec 27, 2019Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance Path traversal / file handlingCVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance. An attacker gains remote code execution and arbitrary file read/write access. Patch the affected systems with the latest available Citrix ADC, Gateway, and SD-WAN WANOP Appliance updates.Exploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
- 9.8CriticalMay 22, 2019Citrix Workspace Application and Receiver for Windows Auth bypass / access controlCVE-2019-11634Citrix Workspace Application and Receiver for Windows are affected. An attacker gains arbitrary code execution and potentially elevated privileges. Patch the affected Citrix Workspace Application and Receiver for Windows to the latest version.Exploited8.1% likely
Top products
- NetScaler5 CVEs in the last year, 4 critical, 5 exploited
- UniconOS3 CVEs in the last year
- NetScaler ADC and NetScaler Gateway1 CVE in the last year, 1 exploited
- Citrix Secure Access Client for Windows1 CVE in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
- CCCS (Canada) · Oct 13, 2026Citrix security advisory (AV26-1034)CVE-2026-102701CVE-2026-53562CVE-2026-53563CVE-2026-53564
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.