KEVWire

Security intelligence, with context.

CISA KEV by vendor

Citrix known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 27 Citrix vulnerabilities: 6 added in the last 365 days, 16 rated critical (CVSS 9 or higher), and 7 with known ransomware use. The most recent was added Oct 4, 2026.

RSS feed for Citrix exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEVCVEVulnerabilityCVSSEPSSFederal due dateRansomware use
2026-10-04CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability8.7 (v4.0)11.4%2026-10-07Unknown
2026-09-27CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability9.5 (v4.0)82.2%2026-09-30Unknown
2026-09-27CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability9.5 (v4.0)78.2%2026-09-30Unknown
2026-09-09CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability9.3 (v4.0)32.7%2026-09-12Unknown
2026-08-26CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability8.8 (v4.0)1.0%2026-08-29Unknown
2026-03-30CVE-2026-3055Citrix NetScaler Out-of-Bounds Read Vulnerability9.3 (v4.0)91.5%2026-04-02Unknown
2025-08-26CVE-2025-7775Citrix NetScaler Memory Overflow Vulnerability9.2 (v4.0)20.7%2025-08-28Unknown
2025-08-25CVE-2024-8068Citrix Session Recording Improper Privilege Management Vulnerability5.1 (v4.0)3.5%2025-09-15Unknown
2025-08-25CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data Vulnerability5.1 (v4.0)21.1%2025-09-15Unknown
2025-07-10CVE-2025-5777Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability9.3 (v4.0)>99.9%2025-07-11Known
2025-06-30CVE-2025-6543Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability9.2 (v4.0)10.4%2025-07-21Unknown
2024-01-17CVE-2023-6548Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability5.5 (v3.1)3.2%2024-01-24Unknown
2024-01-17CVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability8.2 (v3.1)57.6%2024-02-07Unknown
2023-10-18CVE-2023-4966Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability9.4 (v3.1)>99.9%2023-11-08Known
2023-08-16CVE-2023-24489Citrix Content Collaboration ShareFile Improper Access Control Vulnerability9.8 (v3.1)97.3%2023-09-06Unknown
2023-07-19CVE-2023-3519Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability9.8 (v3.1)99.7%2023-08-09Known
2022-12-13CVE-2022-27518Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability9.8 (v3.1)6.9%2023-01-03Unknown
2022-03-25CVE-2017-6316Citrix Multiple Products Remote Code Execution Vulnerability9.8 (v3.1)73.0%2022-04-15Unknown
2022-03-25CVE-2019-12989Citrix SD-WAN and NetScaler SQL Injection Vulnerability9.8 (v3.1)95.0%2022-04-15Unknown
2022-03-25CVE-2019-12991Citrix SD-WAN and NetScaler Command Injection Vulnerability8.8 (v3.1)74.5%2022-04-15Unknown
2022-03-25CVE-2021-22941Citrix ShareFile Improper Access Control Vulnerability9.8 (v3.1)53.6%2022-04-15Known
2021-11-03CVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability9.8 (v3.1)8.1%2022-05-03Known
2021-11-03CVE-2019-13608Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability7.5 (v3.1)30.0%2022-05-03Known
2021-11-03CVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability9.8 (v3.1)>99.9%2022-05-03Known
2021-11-03CVE-2020-8193Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability6.5 (v3.1)88.3%2022-05-03Unknown
2021-11-03CVE-2020-8195Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability6.5 (v3.1)33.0%2022-05-03Unknown
2021-11-03CVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability4.3 (v3.1)26.3%2022-05-03Unknown