Vendor
Citrix vulnerabilities under active attack
24 Citrix vulnerabilities have confirmed evidence of exploitation in the wild, and 7 are used in ransomware campaigns.
24
confirmed exploited
7
used in ransomware
24
past fix deadline
- CVE-2026-19490 Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability Citrix · NetScaler
- CVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2026-3055 Citrix NetScaler Out-of-Bounds Read Vulnerability Citrix · NetScaler
- CVE-2025-7775 Citrix NetScaler Memory Overflow Vulnerability Citrix · NetScaler
- CVE-2024-8068 Citrix Session Recording Improper Privilege Management Vulnerability Citrix · Session Recording
- CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability Citrix · Session Recording
- CVE-2025-5777 Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2025-6543 Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and Gateway
- CVE-2023-6549 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-6548 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-4966 Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability Citrix · Content Collaboration
- CVE-2023-3519 Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Citrix · NetScaler ADC and NetScaler Gateway
- CVE-2022-27518 Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability Citrix · Application Delivery Controller (ADC) and Gateway
- CVE-2021-22941 Citrix ShareFile Improper Access Control Vulnerability Citrix · ShareFile
- CVE-2019-12991 Citrix SD-WAN and NetScaler Command Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2019-12989 Citrix SD-WAN and NetScaler SQL Injection Vulnerability Citrix · SD-WAN and NetScaler
- CVE-2017-6316 Citrix Multiple Products Remote Code Execution Vulnerability Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
- CVE-2019-13608 Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability Citrix · StoreFront Server
- CVE-2020-8193 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8195 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2020-8196 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-19781 Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
- CVE-2019-11634 Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability Citrix · Workspace Application and Receiver for Windows