Citrix Netscaler Application Delivery Controller vulnerabilities
32 known vulnerabilities affecting citrix/netscaler_application_delivery_controller.
Total CVEs
32
CISA KEV
12
actively exploited
Public exploits
9
Exploited in wild
15
Severity breakdown
CRITICAL12HIGH19MEDIUM1
Vulnerabilities
Page 2 of 2
CVE-2026-88777P3CRITICALCVSS 9.8≥ 13.1, < 13.1-64.23≥ 13.1, < 13.1.37.279+2 more2026-09-27
CVE-2026-88777 [CRITICAL] CWE-119 CVE-2026-88777: Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. T
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service
nvd
CVE-2026-88775P3CRITICALCVSS 9.8≥ 13.1, < 13.1-64.23≥ 13.1, < 13.1.37.279+2 more2026-09-27
CVE-2026-88775 [CRITICAL] CWE-120 CVE-2026-88775: Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affe
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Den
nvd
CVE-2026-10816P3HIGHCVSS 7.5fixed in 13.1-37.272≥ 13.1, < 13.1-63.18+2 more2026-06-30
CVE-2026-10816 [HIGH] CWE-73 CVE-2026-10816: Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP,
Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled
nvd
CVE-2018-5314P3HIGHCVSS 7.5v11.0v11.1+1 more2018-03-01
CVE-2018-5314 [HIGH] CWE-287 CVE-2018-5314: Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.1
Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command o
nvd
CVE-2026-10817P3HIGHCVSS 7.5fixed in 13.1-37.272≥ 13.1, < 13.1-63.18+2 more2026-06-30
CVE-2026-10817 [HIGH] CWE-125 CVE-2026-10817: Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if t
Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
nvd
CVE-2024-8535P3HIGHCVSS 8.1≥ 12.1, < 12.1-55.321≥ 12.1, < 13.1-55.34+2 more2024-11-12
CVE-2024-8535 [HIGH] CWE-552 CVE-2024-8535: Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if
Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configurati
nvd
CVE-2024-8534P3HIGHCVSS 8.1≥ 12.1, < 12.1-55.321≥ 12.1, < 13.1-55.34+2 more2024-11-12
CVE-2024-8534 [HIGH] CWE-119 CVE-2024-8534: Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be
nvd
CVE-2026-88778P3HIGHCVSS 7.5≥ 13.1, < 13.1-64.23≥ 13.1, < 13.1.37.279+2 more2026-09-27
CVE-2026-88778 [HIGH] CWE-342 CVE-2026-88778: Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetSca
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.
nvd
CVE-2026-88774P3HIGHCVSS 7.2≥ 13.1, < 13.1-64.23≥ 13.1, < 13.1.37.279+2 more2026-09-27
CVE-2026-88774 [HIGH] CWE-20 CVE-2026-88774: Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage.
nvd
CVE-2026-13474P3HIGHCVSS 7.5fixed in 13.1-37.272≥ 13.1, < 13.1-63.18+2 more2026-06-30
CVE-2026-13474 [HIGH] CWE-401 CVE-2026-13474: Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
nvd
CVE-2024-5491P4HIGHCVSS 7.5≥ 12.1, < 12.1-55.304≥ 12.1, < 13.0-92.31+3 more2024-07-10
CVE-2024-5491 [HIGH] CVE-2024-5491: Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler
Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler
nvd
CVE-2024-5492P4MEDIUMCVSS 6.1≥ 12.1, < 12.1-55.304≥ 12.1, < 13.0-92.31+3 more2024-07-10
CVE-2024-5492 [MEDIUM] CWE-601 CVE-2024-5492: Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary
Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway
nvd
← Previous2 / 2