Browse CVEs

CRITICAL 9.8 CVE-2026-8655 Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service … Netscaler Application Delivery Controller 13.1-37.272 / 13.1-63.18+ Fix from $2,3002026-06-30 CRITICAL 9.8 CVE-2026-8452 Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the applian… Netscaler Application Delivery Controller 13.1-37.272 / 13.1-63.18+ Fix from $2,3002026-06-30 HIGH 7.5 CVE-2026-8451EPSS 16% Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured a… Netscaler Application Delivery Controller 13.1-37.272 / 13.1-63.18+ Fix from $1,9502026-06-30 HIGH 7.5 CVE-2026-13474 Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the v… Netscaler Application Delivery Controller 13.1-37.272 / 13.1-63.18+ Fix from $1,9502026-06-30 HIGH 7.5 CVE-2026-10816 Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management acc… Netscaler Application Delivery Controller 13.1-37.272 / 13.1-63.18+ Fix from $1,9502026-06-30 HIGH 7.5 CVE-2026-10817 Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is… Netscaler Application Delivery Controller 13.1-37.272 / 13.1-63.18+ Fix from $1,9502026-06-30 CRITICAL 9.8 CVE-2026-3055 KEVEPSS 84% Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread Netscaler Application Delivery Controller 13.1-37.262 / 13.1-62.23+ Fix from $2,3002026-03-23 CRITICAL 9.8 CVE-2025-7776EPSS 7% Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetSca… Netscaler Application Delivery Controller 12.1-55.330 / 13.1-37.241+ Fix from $2,3002025-08-26 CRITICAL 9.8 CVE-2025-7775 KEVEPSS 20% Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is conf… Netscaler Application Delivery Controller 12.1-55.330 / 13.1-37.241+ Fix from $2,3002025-08-26 HIGH 7.8 CVE-2025-6759 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS Virtual Apps And Desktops 2503+ Fix from $1,9502025-07-08 CRITICAL 9.8 CVE-2025-6543 KEVEPSS 10% Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gate… Netscaler Application Delivery Controller 13.1-37.236 / 13.1-59.19+ Fix from $2,3002025-06-25 HIGH 7.8 CVE-2025-4879 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Workspace 2402 / 2409+ Fix from $1,9502025-06-17 HIGH 7.8 CVE-2025-0320 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows Secure Access Client 25.5.1.15+ Fix from $1,9502025-06-17 HIGH 8.8 CVE-2025-5349 Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway Netscaler Application Delivery Controller 12.1-55.328 / 13.1-37.235+ Fix from $1,9502025-06-17 HIGH 7.5 CVE-2025-5777 KEVEPSS 100% Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Prox… Netscaler Application Delivery Controller 12.1-55.328 / 13.1-37.235+ Fix from $1,9502025-06-17 HIGH 7.5 CVE-2025-4365EPSS 8% Arbitrary file read in NetScaler Console and NetScaler SDX (SVM) Netscaler Console 13.1-58.32 / 14.1-47.46+ Fix from $1,9502025-06-17 MEDIUM 6.1 CVE-2025-1222 An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac Secure Access Client 25.01.2+ Fix from $1,6002025-02-20 MEDIUM 6.1 CVE-2025-1223 An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac Secure Access Client 25.01.2+ Fix from $1,6002025-02-20 HIGH 8.8 CVE-2024-12284EPSS 13% Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows. Netscaler Agent 13.1-56.18 / 14.1-38.53+ Fix from $1,9502025-02-20 HIGH 8.1 CVE-2024-8535 Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (S… Netscaler Application Delivery Controller 12.1-55.321 / 13.1-37.207+ Fix from $1,9502024-11-12 HIGH 8.1 CVE-2024-8534 Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a … Netscaler Application Delivery Controller 12.1-55.321 / 13.1-37.207+ Fix from $1,9502024-11-12 HIGH 8.0 CVE-2024-8068 KEV Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Activ… Session Recording 2407+ Fix from $1,9502024-11-12 HIGH 8.0 CVE-2024-8069 KEVEPSS 15% Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user … Session Recording 2407+ Fix from $1,9502024-11-12 HIGH 7.3 CVE-2024-7889 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Workspace 2203.1 / 2405+ Fix from $1,9502024-09-11 HIGH 7.3 CVE-2024-7890 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Workspace 2203.1 / 2405+ Fix from $1,9502024-09-11 HIGH 7.1 CVE-2024-42423 Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogi… Workspace Mitigation only Fix from $1,9502024-09-10 HIGH 7.8 CVE-2024-6677 Privilege escalation in uberAgent Uberagent 7.2.1+ Fix from $1,9502024-07-12 HIGH 7.8 CVE-2024-6151 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps a… Virtual Apps And Desktops after 2311 Fix from $1,9502024-07-10 HIGH 7.8 CVE-2024-6286 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Workspace 2203.1 / 2403.1+ Fix from $1,9502024-07-10 HIGH 7.5 CVE-2024-6236 Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX Netscaler Agent 13.0-92.31 / 13.1-53.17+ Fix from $1,9502024-07-10