Citrix NetScaler ADC / Gateway vulnerabilities

11 advisories, 11 actively exploited. Last update: October 4, 2026.

• CVE-2026-88779October 4, 2026High 7.5Exploited
  Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-88771September 27, 2026Critical 9.8Exploited
  Citrix NetScaler Improper Input Validation Vulnerability
• CVE-2026-88772September 27, 2026High 8.1Exploited
  Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-19490September 9, 2026Critical 9.8Exploited
  Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2026-8452August 26, 2026Critical 9.8Exploited
  Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
• CVE-2026-3055March 30, 2026Critical 9.8Exploited
  Citrix NetScaler Out-of-Bounds Read Vulnerability
• CVE-2025-7775August 26, 2025Critical 9.8Exploited
  Citrix NetScaler Memory Overflow Vulnerability
• CVE-2025-5777July 10, 2025High 7.5Exploited
  Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
• CVE-2025-6543June 30, 2025Critical 9.8Exploited
  Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
• CVE-2023-6549January 17, 2024High 8.2Exploited
  Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
• CVE-2023-6548January 17, 2024Medium 5.5Exploited
  Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability