CI
Vendor
Citrix
632
CVEs
64
On KEV
5
New 30D
Products
NA10.0
NetScaler ADC
Network Security
69 CVEs13 on KEV1 new
UN8.5
UniconOS
Citrix
3 CVEs0 on KEV3 new
WA6.8
Workspace app for Windows
Citrix
1 CVEs0 on KEV1 new
AD9.8
Application Delivery Controller Firmware
Citrix
30 CVEs5 on KEV0 new
GF9.8
Gateway Firmware
Citrix
14 CVEs5 on KEV0 new
NA9.8
NetScaler ADC and NetScaler Gateway
Citrix
5 CVEs5 on KEV0 new
NG9.8
Netscaler Gateway Firmware
Citrix
31 CVEs4 on KEV0 new
AD9.8
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
Citrix
4 CVEs4 on KEV0 new
NS9.8
Netscaler Sd-wan
Citrix
16 CVEs3 on KEV0 new
SW8.8
Sd-wan Wanop
Citrix
10 CVEs3 on KEV0 new
SD9.8
Sd-wan
Citrix
18 CVEs2 on KEV0 new
NA9.8
NetScaler ADC and Gateway
Citrix
2 CVEs2 on KEV0 new
SA9.8
SD-WAN and NetScaler
Citrix
2 CVEs2 on KEV0 new
SR8.0
Session Recording
Citrix
2 CVEs2 on KEV0 new
WO9.8
Workspace
Citrix
14 CVEs1 on KEV0 new
SS9.8
Sharefile Storagezones Controller
Citrix
8 CVEs1 on KEV0 new
SH9.8
ShareFile
Citrix
3 CVEs1 on KEV0 new
SS7.5
StoreFront Server
Citrix
3 CVEs1 on KEV0 new
GP7.8
Gateway Plug-in For Linux
Citrix
2 CVEs1 on KEV0 new
RE9.8
Receiver
Citrix
2 CVEs1 on KEV0 new
AD9.8
Application Delivery Controller (ADC) and Gateway
Citrix
1 CVEs1 on KEV0 new
CG9.8
Citrix Gateway, Citrix ADC
Citrix
1 CVEs1 on KEV0 new
CS8.0
Citrix Session Recording
Citrix
1 CVEs1 on KEV0 new
CS9.8
Citrix ShareFile Storage Zones Controller
Citrix
1 CVEs1 on KEV0 new
CC9.8
Content Collaboration
Citrix
1 CVEs1 on KEV0 new
NS9.8
NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
Citrix
1 CVEs1 on KEV0 new
SS9.8
Sharefile Storage Zones Controller
Citrix
1 CVEs1 on KEV0 new
WA9.8
Workspace Application and Receiver for Windows
Citrix
1 CVEs1 on KEV0 new
XE9.9
Xenserver
Citrix
50 CVEs0 on KEV0 new
NA9.8
Netscaler Application Delivery Controller Firmware
Citrix
29 CVEs0 on KEV0 new
XS9.8
Xenmobile Server
Citrix
22 CVEs0 on KEV0 new
AG–
Access Gateway
Citrix
14 CVEs0 on KEV0 new
ME–
Metaframe
Citrix
10 CVEs0 on KEV0 new
MP–
Metaframe Presentation Server
Citrix
9 CVEs0 on KEV0 new
VA8.8
Virtual Apps And Desktops
Citrix
9 CVEs0 on KEV0 new
XE–
Xen
Citrix
9 CVEs0 on KEV0 new
XE9.8
Xenapp
Citrix
9 CVEs0 on KEV0 new
CS–
Cloudportal Services Manager
Citrix
8 CVEs0 on KEV0 new
XE9.8
Xendesktop
Citrix
8 CVEs0 on KEV0 new
NA6.5
Netscaler Access Gateway
Citrix
7 CVEs0 on KEV0 new
NA6.5
Netscaler Access Gateway Firmware
Citrix
7 CVEs0 on KEV0 new
PS–
Presentation Server
Citrix
7 CVEs0 on KEV0 new
AE–
Access Essentials
Citrix
6 CVEs0 on KEV0 new
NF–
Nfuse
Citrix
6 CVEs0 on KEV0 new
PS9.8
Provisioning Services
Citrix
6 CVEs0 on KEV0 new
SA8.8
Secure Access Client
Citrix
6 CVEs0 on KEV0 new
AD10.0
Application Delivery Management
Citrix
5 CVEs0 on KEV0 new
AD7.5
Application Delivery Controller
Citrix
4 CVEs0 on KEV0 new
CL–
Cloudplatform
Citrix
4 CVEs0 on KEV0 new
DS–
Desktop Server
Citrix
4 CVEs0 on KEV0 new
NC8.8
Netscaler Console
Citrix
4 CVEs0 on KEV0 new
WI–
Web Interface
Citrix
4 CVEs0 on KEV0 new
XE8.8
Xencenterweb
Citrix
4 CVEs0 on KEV0 new
CS9.8
Citrix Sd-wan Center
Citrix
3 CVEs0 on KEV0 new
CC8.1
Command Center
Citrix
3 CVEs0 on KEV0 new
GP9.8
Gateway Plug-in
Citrix
3 CVEs0 on KEV0 new
NS9.8
Netscaler Sd-wan Center
Citrix
3 CVEs0 on KEV0 new
NS–
Netscaler Service Delivery Appliance Service VM
Citrix
3 CVEs0 on KEV0 new
PS–
Presentation Server Client
Citrix
3 CVEs0 on KEV0 new
S16.1
Sd-wan 1000 Firmware
Citrix
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-53564 | UN UniconOS Citrix | 5.1 | Oct 13 | Arbitrary file read and write |
| CVE-2026-53563 | UN UniconOS Citrix | 6.9 | Oct 13 | Persistent Command Execution |
| CVE-2026-84419 | WA Workspace app for Windows Citrix | 6.8 | Oct 13 | Out-of-Bounds Write |
| CVE-2026-53562 | UN UniconOS Citrix | 8.5 | Oct 13 | Local Privilege Escalation |
| CVE-2026-88779 In wildKEV | NA NetScaler ADC Citrix | 7.5 | Oct 4 | Memory overflow vulnerability leading to Denial of Service |
| CVE-2026-88778 | NA NetScaler ADC Citrix | 7.5 | Sep 27 | TCP Initial Sequence Number (ISN) prediction |
| CVE-2026-88777 | NA NetScaler ADC Citrix | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88776 | NA NetScaler ADC Citrix | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88775 | NA NetScaler ADC Citrix | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88773 | NA NetScaler ADC Citrix | 10.0 | Sep 27 | HTTP Request Smuggling |
| CVE-2026-88774 | NA NetScaler ADC Citrix | 7.2 | Sep 27 | Feature policy bypass due to improper HTTP URL based expression usage |
| CVE-2026-88772 In wildKEV | NA NetScaler ADC Citrix | 8.1 | Sep 27 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service |
| CVE-2026-88771 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Sep 27 | A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands |
| CVE-2026-78547 | CW Citrix Workspace app for Windows Citrix | 4.4 | Sep 11 | Out-of-Bounds Write |
| CVE-2026-19490 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Aug 19 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 |
| CVE-2026-18751 | WA WorkSpace App Citrix | 5.2 | Aug 18 | Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 |
| CVE-2026-53566 | CS Citrix Secure Access Client for Windows Citrix | 6.8 | Jul 14 | Out-of-bounds memory read |
| CVE-2026-53565 | SA Secure Access Client for Windows Citrix | 8.5 | Jul 14 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2026-13474 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Denial of service via malformed HTTP/2 requests |
| CVE-2026-10817 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Insufficient input validation leading to memory overread |
| CVE-2026-10816 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Arbitrary File Read (Unauthenticated) |
| CVE-2026-8655 | NA NetScaler ADC Citrix | 9.8 | Jun 30 | Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service |
| CVE-2026-8452 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Jun 30 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service |
| CVE-2026-8451 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Insufficient input validation leading to memory overread |
| CVE-2026-3055 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Mar 23 | Insufficient input validation leading to memory overread |
| CVE-2025-7776 | NA NetScaler ADC Citrix | 9.8 | Aug 26 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway… |
| CVE-2025-7775 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Aug 26 | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service |
| CVE-2025-6759 | VA Virtual Apps And Desktops Citrix | 7.8 | Jul 8 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS |
| CVE-2025-6543 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Jun 25 | Memory overflow vulnerability leading to unintended control flow and Denial of Service |
| CVE-2025-4879 | WO Workspace Citrix | 7.8 | Jun 17 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2025-0320 | SA Secure Access Client Citrix | 7.8 | Jun 17 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows |
| CVE-2025-5349 | NA NetScaler ADC Citrix | 8.8 | Jun 17 | Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway |
| CVE-2025-4365 | NS Netscaler Sdx Citrix | 7.5 | Jun 17 | Arbitrary file read in NetScaler Console and NetScaler SDX (SVM) |
| CVE-2025-5777 RansomwareIn wildKEV | NA NetScaler ADC Citrix | 7.5 | Jun 17 | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread |
| CVE-2025-1223 | SA Secure Access Client Citrix | 6.1 | Feb 20 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac |
| CVE-2025-1222 | SA Secure Access Client Citrix | 6.1 | Feb 20 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac |
| CVE-2024-12284 | NC Netscaler Console Citrix | 8.8 | Feb 20 | Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows |
| CVE-2024-8535 | NA NetScaler ADC Citrix | 8.1 | Nov 12 | Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP… |
| CVE-2024-8534 | NA NetScaler ADC Citrix | 8.1 | Nov 12 | Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP… |
| CVE-2024-8069 In wildKEV | SR Session Recording Citrix | 8.0 | Nov 12 | Limited remote code execution with privilege of a NetworkService Account access |
| CVE-2024-8068 In wildKEV | CS Citrix Session Recording Citrix | 8.0 | Nov 12 | Privilege escalation to NetworkService Account access |
| CVE-2024-7890 | WO Workspace Citrix | 7.3 | Sep 11 | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2024-7889 | WO Workspace Citrix | 7.3 | Sep 11 | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2024-42423 | WO Workspace Citrix | 7.1 | Sep 10 | Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin |
| CVE-2024-6677 | UB Uberagent Citrix | 7.8 | Jul 12 | Privilege escalation in uberAgent |
| CVE-2024-6286 | WO Workspace Citrix | 7.8 | Jul 10 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows |
| CVE-2024-6236 | NC Netscaler Console Citrix | 7.5 | Jul 10 | Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX |
| CVE-2024-6151 | VA Virtual Apps And Desktops Citrix | 7.8 | Jul 10 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS |
| CVE-2024-6150 | PR Provisioning Citrix | 4.3 | Jul 10 | A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning |
| CVE-2024-6149 | WO Workspace Citrix | 6.1 | Jul 10 | Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 |
| CVE-2024-6148 | WO Workspace Citrix | 8.8 | Jul 10 | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 |
| CVE-2024-6235 | NC Netscaler Console Citrix | 8.8 | Jul 10 | Sensitive information disclosure in NetScaler Console |
| CVE-2024-5492 | NA NetScaler ADC Citrix | 6.1 | Jul 10 | Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway |
| CVE-2024-5491 | NA NetScaler ADC Citrix | 7.5 | Jul 10 | Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler |
| CVE-2024-5661 | XE Xenserver Citrix | 6.0 | Jun 13 | An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or… |
| CVE-2024-3661 | SA Secure Access Client Citrix | 7.6 | May 6 | DHCP can add routes to a client’s routing table via the classless static route option (121) |
| CVE-2024-2049 | S1 Sd-wan 1000 Firmware Citrix | 5.3 | Mar 12 | Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the… |
| CVE-2023-6184 | VA Virtual Apps And Desktops Citrix | 7.2 | Jan 18 | Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting |
| CVE-2023-6549 In wildKEV | NA NetScaler ADC Citrix | 7.5 | Jan 17 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability |
| CVE-2023-6548 In wildKEV | NA NetScaler ADC Citrix | 8.8 | Jan 17 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability |