Citrix (NetScaler) · weakness class
File and Path Handling
20 CVEs · 1 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 1
- check available
- 3
- likely to be exploited
- 3
Every one of the 20 is a mark on the map. Named now: 1 to 20, most at risk first.
- Citrix ADC and Gateway - Directory Traversal
- Citrix XenMobile Server - Local File Inclusion
- Citrix SD-WAN Center - Local File Inclusion
- Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read
- Citrix XenServer 7.1 and newer allows Directory Traversal.
- In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, allow unauthenticate…
- Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8
- An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020, whi…
- Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory o…
- A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4.
- In Citrix XenMobile Server through 10.12 RP9, there is an Authenticated Directory Traversal vulnerability, leading to remote code execution.
- There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
- Citrix ShareFile StorageZones Controller before 5.4.2 allows Directory Traversal.
- There is an Insufficient Path Validation Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3.
- Arbitrary File Read (Unauthenticated)
- Authenticated user can access unintended user capabilities
- Arbitrary file read and write
- Local Privilege Escalation
- Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
- An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.