Cyberfeed6 › Vendors › Citrix
CISA lists 27 Citrix vulnerabilities as exploited in real attacks, and 7 of them are known to be used in ransomware campaigns. Most entries concern NetScaler, NetScaler ADC and NetScaler Gateway, Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance, Session Recording.
Showing the 27 most recently added of 27. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | NetScaler | 2026-10-04 | High (8.7) | No | Vendor notice |
| CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | NetScaler | 2026-09-27 | Critical (9.5) | No | Vendor notice |
| CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability | NetScaler | 2026-09-27 | Critical (9.5) | No | Vendor notice |
| CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | NetScaler | 2026-09-09 | Critical (9.3) | No | Vendor notice |
| CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | NetScaler ADC and NetScaler Gateway | 2026-08-26 | High (8.8) | No | Vendor notice |
| CVE-2026-3055Citrix NetScaler Out-of-Bounds Read Vulnerability | NetScaler | 2026-03-30 | Critical (9.3) | No | Vendor notice |
| CVE-2025-7775Citrix NetScaler Memory Overflow Vulnerability | NetScaler | 2025-08-26 | Critical (9.2) | No | Vendor notice |
| CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data Vulnerability | Session Recording | 2025-08-25 | Medium (5.1) | No | Vendor notice |
| CVE-2024-8068Citrix Session Recording Improper Privilege Management Vulnerability | Session Recording | 2025-08-25 | Medium (5.1) | No | Vendor notice |
| CVE-2025-5777Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | NetScaler ADC and Gateway | 2025-07-10 | Critical (9.3) | Yes | Vendor notice |
| CVE-2025-6543Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | NetScaler ADC and Gateway | 2025-06-30 | Critical (9.2) | No | Vendor notice |
| CVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | NetScaler ADC and NetScaler Gateway | 2024-01-17 | High (8.2) | No | Vendor notice |
| CVE-2023-6548Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | NetScaler ADC and NetScaler Gateway | 2024-01-17 | Medium (5.5) | No | Vendor notice |
| CVE-2023-4966Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | NetScaler ADC and NetScaler Gateway | 2023-10-18 | Critical (9.4) | Yes | Vendor notice |
| CVE-2023-24489Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | Content Collaboration | 2023-08-16 | Critical (9.8) | No | Vendor notice |
| CVE-2023-3519Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | NetScaler ADC and NetScaler Gateway | 2023-07-19 | Critical (9.8) | Yes | Vendor notice |
| CVE-2022-27518Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | Application Delivery Controller (ADC) and Gateway | 2022-12-13 | Critical (9.8) | No | Vendor notice |
| CVE-2021-22941Citrix ShareFile Improper Access Control Vulnerability | ShareFile | 2022-03-25 | Critical (9.8) | Yes | |
| CVE-2019-12991Citrix SD-WAN and NetScaler Command Injection Vulnerability | SD-WAN and NetScaler | 2022-03-25 | High (8.8) | No | |
| CVE-2019-12989Citrix SD-WAN and NetScaler SQL Injection Vulnerability | SD-WAN and NetScaler | 2022-03-25 | Critical (9.8) | No | |
| CVE-2017-6316Citrix Multiple Products Remote Code Execution Vulnerability | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 2022-03-25 | Critical (9.8) | No | |
| CVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Medium (4.3) | No | |
| CVE-2020-8195Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Medium (6.5) | No | |
| CVE-2020-8193Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Medium (6.5) | No | |
| CVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Critical (9.8) | Yes | |
| CVE-2019-13608Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | StoreFront Server | 2021-11-03 | High (7.5) | Yes | |
| CVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | Workspace Application and Receiver for Windows | 2021-11-03 | Critical (9.8) | Yes |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.