Citrix known exploited vulnerabilities
The Beam CVE database tracks 27 known exploited vulnerabilities for Citrix: 15 critical, 7 high and 5 medium severity. The newest is CVE-2026-88779, published Oct 4, 2026.
These are the Citrix vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 27
- Critical
- 15
- Known exploited (CISA KEV)
- 27
- Published in the last 30 days
- 3
All entries, newest first
CVE-2026-88779
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
high7.5ExploitedOct 4, 2026CVE-2026-88771
Citrix NetScaler Improper Input Validation Vulnerability
critical9.8ExploitedSep 27, 2026CVE-2026-88772
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
critical8.1ExploitedSep 27, 2026CVE-2026-19490
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
critical9.8ExploitedAug 19, 2026CVE-2026-8452
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
high9.8ExploitedJun 30, 2026CVE-2026-3055
Citrix NetScaler Out-of-Bounds Read Vulnerability
critical9.8ExploitedMar 23, 2026CVE-2025-7775
Citrix NetScaler Memory Overflow Vulnerability
critical9.8ExploitedAug 26, 2025CVE-2025-6543
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
critical9.8ExploitedJun 25, 2025CVE-2025-5777
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
critical7.5ExploitedJun 17, 2025CVE-2024-8068
Citrix Session Recording Improper Privilege Management Vulnerability
medium8.0ExploitedNov 12, 2024CVE-2024-8069
Citrix Session Recording Deserialization of Untrusted Data Vulnerability
medium8.0ExploitedNov 12, 2024CVE-2023-6548
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
high8.8ExploitedJan 17, 2024CVE-2023-6549
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
high7.5ExploitedJan 17, 2024CVE-2023-4966
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
high7.5ExploitedOct 10, 2023CVE-2023-3519
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
critical9.8ExploitedJul 19, 2023CVE-2023-24489
Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
critical9.8ExploitedJul 10, 2023CVE-2022-27518
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
critical9.8ExploitedDec 13, 2022CVE-2021-22941
Citrix ShareFile Improper Access Control Vulnerability
critical9.8ExploitedSep 23, 2021CVE-2020-8193
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
medium6.5ExploitedJul 10, 2020CVE-2020-8195
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
medium6.5ExploitedJul 10, 2020CVE-2020-8196
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
medium4.3ExploitedJul 10, 2020CVE-2019-19781
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
critical9.8ExploitedDec 27, 2019CVE-2019-13608
Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
high7.5ExploitedAug 29, 2019CVE-2019-12989
Citrix SD-WAN and NetScaler SQL Injection Vulnerability
critical9.8ExploitedJul 16, 2019CVE-2019-12991
Citrix SD-WAN and NetScaler Command Injection Vulnerability
high8.8ExploitedJul 16, 2019CVE-2019-11634
Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
critical9.8ExploitedMay 22, 2019CVE-2017-6316
Citrix Multiple Products Remote Code Execution Vulnerability
critical9.8ExploitedJul 20, 2017
