Vendor
Citrix
- CVEs tracked · all time
- 24
- in CISA KEV · all time
- 8
- articles · since 11 Sep
- 48
- articles · all time
- 86
48 articles since 11 Sep; 7 CISA notices, marked below the bars.
Show as table
| Day (UTC) | Articles |
|---|---|
| Mon 14 Sep | 1 |
| Sun 27 Sep | 6 |
| Mon 28 Sep | 9 |
| Tue 29 Sep | 1 |
| Wed 30 Sep | 4 |
| Thu 1 Oct | 4 |
| Fri 2 Oct | 2 |
| Sun 4 Oct | 3 |
| Mon 5 Oct | 5 |
| Tue 6 Oct | 1 |
| Wed 7 Oct | 1 |
| Thu 8 Oct | 1 |
| Fri 9 Oct | 5 |
| Sat 10 Oct | 1 |
| Sun 11 Oct | 1 |
| Thu 15 Oct | 1 |
| Mon 19 Oct | 2 |
Products: ADC, Citrix Endpoint Analysis Client for Windows, Citrix Secure Access Client for Windows, Gateway and 5 more
ADCCitrix Endpoint Analysis Client for WindowsCitrix Secure Access Client for WindowsGatewayNetScalerNetScaler ADC and GatewayNetScaler ADC and NetScaler GatewaySecure Access Client for WindowsUniconOS
CVEs
24 CVEsCVE-2026-88771Citrix NetScaler Improper Input Validation VulnerabilityCVSS9.5CriticalExploited82%EPSS28articles
CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCVSS8.7HighExploited0.6%EPSS9articles
CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCVSS9.5CriticalExploited78%EPSS29articles
CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityCVSS8.8HighExploited1.0%EPSS11articles
CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS9.3CriticalExploited23%EPSS9articles
CVE-2025-5777Citrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityCVSS9.3CriticalExploited99.9%EPSS1article
CVE-2026-3055Citrix NetScaler Out-of-Bounds Read VulnerabilityCVSS9.3CriticalExploited91%EPSS15articles
CVE-2023-4966Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityCVSS9.4CriticalExploited99.9%EPSS1article
CVE-2026-107406Memory overflow vulnerability leading to Remote Code Execution or Denial of ServiceCVSS9.5Critical–Not in KEV0.5%EPSS5articles
12 more CVEs
CVE-2026-88776Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of ServiceCVSS8.8High–Not in KEV0.7%EPSS2articles
CVE-2026-88775Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of ServiceCVSS8.8High–Not in KEV0.7%EPSS2articles
CVE-2026-88774Feature policy bypass due to improper HTTP URL based expression usageCVSS7.0High–Not in KEV0.2%EPSS2articles
CVE-2026-53565Local Privilege escalation allows a low-privileged user to gain SYSTEM privilegesCVSS8.5High–Not in KEV0.2%EPSS1article
CVE-2026-8655Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of ServiceCVSS8.8High–Not in KEV0.6%EPSS1article
- Attackers chained two Citrix NetScaler flaws to gain root access and steal keysRapid7
- Citrix NetScaler Flaw Sparks Attacks, Prompting Urgent PatchingCloudflare
- Citrix Patches XenServer Flaws That Could Let Guests Crash HostsSecurityOnline
- Cybercrime, Ransomware Arrests and Exploited Flaws Lead Security Affairs RoundupSecurity Affairs
- Enterprise Software’s Hidden AI Agents Create a Security Blind SpotThe Hacker News
- GhostAction Hijacks Maintainer Accounts to Steal Secrets From GitHub RepositoriesThe Hacker News
- Citrix Patches Critical NetScaler Flaw Enabling Remote Code ExecutionSecurity Affairs
- Citrix Patches Critical NetScaler Flaw That Could Enable Remote Code ExecutionThe Hacker News
- Citrix urges urgent patching of critical NetScaler flaw that risks remote code executionSecurityWeek
- Citrix Urges NetScaler Users to Patch Critical Flaw Enabling Remote Code ExecutionSecurityOnline
- ThreatsDay Round-Up Exposes Rogue Affiliates and Leaky Attack ToolsThe Hacker News
- Four attacker groups exploited Citrix NetScaler flaw to gain privileged accessSecurityOnline
- Hackers Exploited Citrix NetScaler Flaw to Knock Services OfflineSOCRadar
- CISA Flags Exploited Citrix NetScaler Flaw That Can Take Services OfflineSecurity Affairs
- Citrix warns attackers are exploiting a NetScaler zero dayInfosecurity
- Credential sprawl is outpacing security teams’ ability to see itThe Hacker News
- Citrix NetScaler Zero Day Exploited in Targeted Attacks, CISA WarnsThe Hacker News
- Citrix NetScaler Zero Day Exploited Days After PitScaler FixesSecurityWeek
- CISA Warns of Active Exploitation Targeting Citrix NetScaler FlawCISA · official notice
- CISA Warns of Active Exploitation in Citrix NetScaler FlawCISA · official notice
- Citrix NetScaler Flaw Exploited to Knock SAML Gateways OfflineSecurityOnline
- Citrix NetScaler Reboots Persist as SAML Flaw Fix Remains PendingSecurityOnline
- Citrix NetScaler Zero Days Exploited as Vendors Take Different RisksDark Reading
- Citrix NetScaler Zero Days Exploited Against 50,000 DevicesDataBreaches
- Citrix NetScaler Zero Day Lets Attackers Seize Root Access Without PasswordsSecurityOnline
- Attackers Exploit Critical NetScaler Flaw to Steal ConfigurationsThe Hacker News
- Active NetScaler Zero Days Expose Devices to Remote Code ExecutionSecurityOnline
- Citrix NetScaler Zero Days Let Attackers Steal Credentials Through Web ShellsSecurityWeek
- Attackers Exploit Citrix NetScaler Flaw to Deploy Root Web ShellsThe Hacker News
- Citrix NetScaler Zero Day Gives Attackers Tunnels Into Internal NetworksSecurity Affairs
- NetScaler Flaw Exploited to Gain Root Access Before AuthenticationThe Hacker News
- Critical NetScaler Flaw Lets Attackers Run Root Commands UnauthenticatedSecurityOnline
- Citrix NetScaler Zero Days Exploited as 50,000 Systems ExposedUnit 42
- Hackers Exploit Citrix NetScaler Flaws as Forgotten Assets Fuel AttacksThe Hacker News
- UK Cyber Agency Urges Action on Exploited Citrix NetScaler FlawsNCSC · official notice
- Citrix NetScaler Zero Days Expose Appliances to Active RCE AttacksRapid7
- CISA Warns of Active Exploitation in Critical Citrix NetScaler FlawsSecurity Affairs
- Citrix NetScaler Zero Days Exploited in Attacks, Patch NowInfosecurity
- Citrix Patches NetScaler Zero Days Exploited in Global AttacksSOCRadar
- Citrix Patches NetScaler Zero Days Exploited in Global AttacksSecurityWeek
- Nine Flaws Exploited as Attackers Target Edge Products and WordPressSecurityOnline
- CISA Warns NetScaler Flaw Is Being Exploited for Command ExecutionCISA · official notice
- CISA Warns Attackers Are Exploiting Critical Citrix NetScaler FlawCISA · official notice
- CISA Warns Attackers Are Exploiting Critical Citrix NetScaler Zero-DaysCISA · official notice
- CISA Flags Actively Exploited Citrix NetScaler Flaws for Urgent ActionCISA · official notice
- Citrix NetScaler Zero Days Exploited Against Unpatched SystemsSecurity Affairs
- Citrix NetScaler Zero Days Exploited to Attack VPN AppliancesSecurityOnline
- CISA Tracks Exploitation of Critical N-central, GitLab and MikroTik FlawsSecurityOnline
- CISA Flags Four Actively Exploited Flaws Including Cisco Zero DaySecurity Affairs
- CISA Warns Attackers Are Exploiting Critical Citrix NetScaler FlawSecurityWeek
The latest 50 are listed. Every article is in the RSS feed.