NA
Network Security
NetScaler ADC
On CISA KEVExploited in the wildRansomware-linked
69
CVEs
13
On KEV
10.0
Max CVSS
1
New 30D
Severity mix
Critical 17High 28Medium 12Low 0
Watch
Add NetScaler ADC to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88771 In wildKEV | 9.8 | Sep 27 | A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands Affected: before 14.1-73.37; before 13.1-64.23; before 14.1-73.37 FIPS; before 13.1.37.279 FIPS and NDcPP |
| CVE-2026-19490 In wildKEV | 9.8 | Aug 19 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 Affected: 13.1 before 13.1-37.277; 13.1 before 13.1-37.277; 13.1 before 13.1-63.21; 14.1 before 14.1-73.32; 14.1-66.68 through 14.1-73.32 |
| CVE-2026-8452 In wildKEV | 9.8 | Jun 30 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service Affected: 13.1 before 13.1-63.18; 14.1 before 14.1-72.61 |
| CVE-2026-3055 In wildKEV | 9.8 | Mar 23 | Insufficient input validation leading to memory overread Affected: 13.1 before 13.1-62.23; 14.1 before 14.1-60.58 |
| CVE-2025-7775 In wildKEV | 9.8 | Aug 26 | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service Affected: 13.1 before 13.1-59.22; 14.1 before 14.1-47.48 |
| CVE-2025-6543 In wildKEV | 9.8 | Jun 25 | Memory overflow vulnerability leading to unintended control flow and Denial of Service Affected: 13.1 before 13.1-59.19; 14.1 before 14.1-47.46 |
| CVE-2023-3519 RansomwareIn wildKEV | 9.8 | Jul 19 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability Affected: 13.1 before 49.13; 13.0 before 91.13 |
| CVE-2026-88773 | 10.0 | Sep 27 | HTTP Request Smuggling Affected: before 14.1-73.37; before 13.1-64.23; before 14.1-73.37 FIPS; before 13.1-37.279 and NDcPP |
| CVE-2026-88777 | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service Affected: before 14.1-73.37; before 13.1-64.23; before 14.1-73.37 FIPS; before 13.1.37.279 FIPS and NDcPP |
| CVE-2026-88776 | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service Affected: before 14.1-73.37; before 13.1-64.23; before 14.1-73.37 FIPS; before 13.1.37.279 FIPS and NDcPP |
| CVE-2026-88775 | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service Affected: before 14.1-73.37; before 13.1-64.23; before 14.1-73.37 FIPS; before 13.1.37.279 FIPS and NDcPP |
| CVE-2026-8655 | 9.8 | Jun 30 | Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service Affected: before 13.1-37.272; before 13.1-37.272; 13.1 before 13.1-63.18; 14.1 before 14.1-72.61; 14.1-66.68 |
| CVE-2025-7776 | 9.8 | Aug 26 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway… Affected: 12.1 before 12.1-55.330; 12.1 before 12.1-55.330; 13.1 before 13.1-37.241; 13.1 before 13.1-37.241; 13.1 before 13.1-59.22; 14.1 before 14.1-47.48 |
| CVE-2022-27516 | 9.8 | Nov 8 | User login brute force protection functionality bypass Affected: 12.1 before 12.1-65.21; 13.0 before 13.0-88.12; 13.1 before 13.1-33.47 |
| CVE-2022-27510 | 9.8 | Nov 8 | Unauthorized access to Gateway user capabilities Affected: 12.1 before 12.1-65.21; 13.0 before 13.0-88.12; 13.1 before 13.1-33.41 |
| CVE-2016-2071 | 9.8 | Feb 17 | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows… Affected: 10.5; 10.5e; 11.0; 10.5; 10.5e; 11.0 |
| CVE-2022-27513 | 9.6 | Nov 8 | Remote desktop takeover via phishing Affected: 12.1 before 12.1-65.21; 13.0 before 13.0-88.12; 13.1 before 13.1-33.41 |
Showing 17