Citrix Netscaler Gateway vulnerabilities
39 known vulnerabilities affecting citrix/netscaler_gateway.
Total CVEs
39
CISA KEV
12
actively exploited
Public exploits
9
Exploited in wild
15
Severity breakdown
CRITICAL12HIGH23MEDIUM4
Vulnerabilities
Page 1 of 2
CVE-2026-88771P1CRITICALCVSS 9.8KEVPoC≥ 13.1, < 13.1-64.23≥ 14.1, < 14.1-73.372026-09-27
CVE-2026-88771 [CRITICAL] CWE-20 CVE-2026-88771: Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.
nvd
CVE-2025-5777P1HIGHCVSS 7.5KEVPoCRansomware≥ 13.1, < 13.1-58.32≥ 14.1, < 14.1-43.562025-06-17
CVE-2025-5777 [HIGH] CWE-125 CVE-2025-5777: Insufficient input validation leading to memory overread when the NetScaler is configured as a Gatew
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
nvd
CVE-2026-3055P1CRITICALCVSS 9.8KEVPoC≥ 13.1, < 13.1-62.23≥ 14.1, < 14.1-60.582026-03-23
CVE-2026-3055 [CRITICAL] CWE-125 CVE-2026-3055: Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP l
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
nvd
CVE-2023-4966P1HIGHCVSS 7.5KEVPoCRansomware≥ 13.0, < 13.0-92.19≥ 13.1, < 13.1-49.15+4 more2023-10-10
CVE-2023-4966 [HIGH] CWE-119 CVE-2023-4966: Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
nvd
CVE-2026-88772P1HIGHCVSS 8.1KEVPoC≥ 13.1, < 13.1-64.23≥ 14.1, < 14.1-73.372026-09-27
CVE-2026-88772 [HIGH] CWE-119 CVE-2026-88772: Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service
nvd
CVE-2023-6549P1HIGHCVSS 7.5KEVPoC≥ 13.0, < 13.0-92.21≥ 13.1, < 13.1-51.15+1 more2024-01-17
CVE-2023-6549 [HIGH] CWE-119 CVE-2023-6549: Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScal
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
nvd
CVE-2026-8452P1CRITICALCVSS 9.8KEVPoC≥ 13.1, < 13.1-63.18≥ 14.1, < 14.1-72.612026-06-30
CVE-2026-8452 [CRITICAL] CWE-119 CVE-2026-8452: Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or errone
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
nvd
CVE-2025-7775P1CRITICALCVSS 9.8KEV≥ 13.1, < 13.1-59.22≥ 14.1, < 14.1-47.482025-08-26
CVE-2025-7775 [CRITICAL] CWE-119 CVE-2025-7775: Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
(OR)
NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL
nvd
CVE-2026-19490P1CRITICALCVSS 9.8KEV≥ 13.1, < 13.1-63.21≥ 14.1, < 14.1-73.322026-08-19
CVE-2026-19490 [CRITICAL] CWE-288 CVE-2026-19490: Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
nvd
CVE-2025-6543P1CRITICALCVSS 9.8KEV≥ 13.1, < 13.1-59.19≥ 14.1, < 14.1-47.462025-06-25
CVE-2025-6543 [CRITICAL] CWE-119 CVE-2025-6543: Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
nvd
CVE-2023-6548P1HIGHCVSS 8.8KEV≥ 13.0, < 13.0-92.21≥ 13.1, < 13.1-51.15+1 more2024-01-17
CVE-2023-6548 [HIGH] CWE-94 CVE-2023-6548: Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway all
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
nvd
CVE-2026-88779P1HIGHCVSS 7.5KEV≥ 13.1, < 13.1-64.28≥ 14.1, < 14.1-73.412026-10-04
CVE-2026-88779 [HIGH] CWE-119 CVE-2026-88779: Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, be
Vulnerability in NetScaler ADC and NetScaler Gateway.
This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
nvd
CVE-2026-8451P2HIGHCVSS 7.5ExploitedPoC≥ 13.1, < 13.1-63.18≥ 14.1, < 14.1-72.612026-06-30
CVE-2026-8451 [HIGH] CWE-125 CVE-2026-8451: Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if N
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
nvd
CVE-2023-4967P1HIGHCVSS 7.5ExploitedRansomware≥ 13.0, < 13.0-92.19≥ 13.1, < 13.1-49.15+1 more2023-10-27
CVE-2023-4967 [HIGH] CWE-119 CVE-2023-4967: Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual s
Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server
nvd
CVE-2023-3467P2HIGHCVSS 8.0Exploited≥ 13.0, < 13.0-91.13≥ 13.1, < 13.1-49.13+2 more2023-07-19
CVE-2023-3467 [HIGH] CWE-269 CVE-2023-3467: Privilege Escalation to root administrator (nsroot)
Privilege Escalation to root administrator (nsroot)
nvd
CVE-2026-88773P2CRITICALCVSS 10.0PoC≥ 13.1, < 13.1-64.23≥ 14.1, < 14.1-73.372026-09-27
CVE-2026-88773 [CRITICAL] CWE-444 CVE-2026-88773: Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Ci
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.
nvd
CVE-2025-7776P2CRITICALCVSS 9.8≥ 13.1, < 13.1-59.22≥ 14.1, < 14.1-47.482025-08-26
CVE-2025-7776 [CRITICAL] CWE-119 CVE-2025-7776: Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service i
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it
nvd
CVE-2026-8655P3CRITICALCVSS 9.8≥ 13.1, < 13.1-63.18≥ 14.1, < 14.1-72.612026-06-30
CVE-2026-8655 [CRITICAL] CWE-119 CVE-2026-8655: Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredict
Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment
nvd
CVE-2025-5349P3HIGHCVSS 8.8≥ 13.1, < 13.1-58.32≥ 14.1, < 14.1-43.562025-06-17
CVE-2025-5349 [HIGH] CWE-1284 CVE-2025-5349: Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway
nvd
CVE-2026-88776P3CRITICALCVSS 9.8≥ 13.1, < 13.1-64.23≥ 14.1, < 14.1-73.372026-09-27
CVE-2026-88776 [CRITICAL] CWE-119 CVE-2026-88776: Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. Th
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior or Denial of Service
nvd
1 / 2Next →