NetScaler ADC / Gateway 13.1 vulnerabilities
11 advisories affect Citrix NetScaler ADC / Gateway 13.1, 11 already exploited by attackers. Latest: October 4, 2026.
Running NetScaler ADC / Gateway 13.1 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on NetScaler ADC / Gateway 13.1 alerts
Turn on NetScaler ADC / Gateway 13.1 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88779 · October 4, 2026 | High 7.5 Exploited | before 13.1-64.28; before 13.1-37.282; before 13.1-64.28 Fixed in 13.1-37.282, 13.1-64.28 |
| Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88771 · September 27, 2026 | Critical 9.8 Exploited | before 13.1-64.23; before 13.1.37.279 FIPS and NDcPP; before 13.1-64.23 Fixed in 13.1.37.279 FIPS and NDcPP, 13.1-64.23 |
| Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88772 · September 27, 2026 | High 8.1 Exploited | before 13.1-64.23; before 13.1.37.279 FIPS and NDcPP; before 13.1-64.23 Fixed in 13.1.37.279 FIPS and NDcPP, 13.1-64.23 |
| Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-19490 · September 9, 2026 | Critical 9.8 Exploited | from 13.1 to 13.1-63.21 (NVD: 63.21 (included); CPE lists it as excluded); build 13.1-37.x before 13.1-37.277 Fixed in 13.1-37.277 |
| Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-8452 · August 26, 2026 | Critical 9.8 Exploited | before 13.1-37.272; from 13.1 to before 13.1-63.18 Fixed in 13.1-37.272, 13.1-63.18 |
| Citrix NetScaler Out-of-Bounds Read Vulnerability CVE-2026-3055 · March 30, 2026 | Critical 9.8 Exploited | 13.1 before 13.1-62.23; 13.1 before 13.1-37.262 Fixed in 13.1-37.262, 13.1-62.23 |
| Citrix NetScaler Memory Overflow Vulnerability CVE-2025-7775 · August 26, 2025 | Critical 9.8 Exploited | from 13.1 to before 13.1-37.241; from 13.1 to before 13.1-59.22 Fixed in 13.1-37.241, 13.1-59.22 |
| Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability CVE-2025-5777 · July 10, 2025 | High 7.5 Exploited | 13.1 before 13.1-58.32 (13.1-37.x before 13.1-37.235); 13.1 before 13.1-58.32 Fixed in 13.1-58.32 |
| Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability CVE-2025-6543 · June 30, 2025 | Critical 9.8 Exploited | 13.1 before 13.1-59.19 (13.1-37.x before 13.1-37.236); 13.1 before 13.1-59.19 Fixed in 13.1-59.19 |
| Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability CVE-2023-6549 · January 17, 2024 | High 8.2 Exploited | 13.1 before 13.1-51.15 / 13.1-37.176; 13.1 before 13.1-51.15 Fixed in 13.1-51.15, 13.1-51.15 (oppure 13.1-37.176) |
| Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability CVE-2023-6548 · January 17, 2024 | Medium 5.5 Exploited | 13.1 before 13.1-51.15 / 13.1-37.176; 13.1 before 13.1-51.15 Fixed in 13.1-51.15, 13.1-51.15 (oppure 13.1-37.176) |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.