Citrix

CVE-2017-6316 is a critical remote code execution vulnerability in Citrix NetScaler SD-WAN devices through v9.1.2.26.561201, allowing attackers to execute arbit…

CVE-2019-11634 is a critical vulnerability in Citrix Workspace App before version 1904 for Windows, classified as an incorrect access control issue (CWE-284). T…

CVE-2019-12989 is a critical SQL injection vulnerability (CWE-89) affecting Citrix SD-WAN versions 10.2.x prior to 10.2.3 and NetScaler SD-WAN versions 10.0.x p…

CVE-2019-12991 is a high-severity vulnerability affecting Citrix SD-WAN 10.2.x prior to 10.2.3 and NetScaler SD-WAN 10.0.x prior to 10.0.8. The flaw involves im…

CVE-2019-13608 is a High severity vulnerability (CVSS 7.5) affecting Citrix StoreFront Server versions before 1903, 7.15 LTSR before CU4, and 7.6 LTSR before CU…

CVE-2019-19781 is a critical vulnerability in Citrix Application Delivery Controller, Gateway, and SD-WAN WANOP Appliance that allows unauthenticated attackers …

CVE-2020-8193 is a vulnerability in Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance that is actively exploited in the wild. It…

CVE-2020-8195 is a medium severity vulnerability in Citrix ADC, Citrix Gateway, and Citrix SD-WAN WAN-OP appliances caused by improper input validation. It allo…

CVE-2020-8196 is an improper access control vulnerability affecting Citrix ADC, Citrix Gateway, and Citrix SD-WAN WAN-OP versions prior to specific fixed releas…

CVE-2021-22941 is a critical improper access control vulnerability in Citrix ShareFile storage zones controller versions prior to 5.11.20. It allows an unauthen…

CVE-2022-27518 is a critical remote code execution vulnerability affecting Citrix Application Delivery Controller (ADC) and Gateway. It allows unauthenticated a…

CVE-2023-24489 is a critical vulnerability in Citrix Content Collaboration (ShareFile storage zones controller) allowing unauthenticated remote compromise. The …

CVE-2023-3519 is a critical remote code execution vulnerability in Citrix NetScaler ADC and NetScaler Gateway, classified under CWE-94. It allows unauthenticate…

CVE-2023-4966 is a critical information disclosure vulnerability in Citrix NetScaler ADC and NetScaler Gateway affecting Gateway and AAA virtual servers. The vu…

CVE-2023-6548 is a code injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway that allows authenticated, low-privileged remote code execution on…

CVE-2023-6549 is a high-severity memory corruption vulnerability (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that allows unauthenticated denial of s…

CVE-2024-8068 is a high-severity privilege escalation vulnerability (CWE-269) in Citrix Session Recording that allows authenticated domain users to gain Network…

CVE-2024-8069 is a high-severity vulnerability in Citrix Session Recording that allows limited remote code execution with the privileges of a NetworkService acc…

CVE-2025-5777 is a high-severity vulnerability (CVSS 7.5) in Citrix NetScaler ADC and Gateway affecting Gateway and AAA virtual servers. It stems from insuffici…

CVE-2025-6543 is a critical memory overflow vulnerability (CWE-119) affecting Citrix NetScaler ADC and NetScaler Gateway when configured as Gateway or AAA virtu…

CVE-2025-7775 is a critical memory overflow vulnerability (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway affecting versions 13.1, 14.1, 13.1-FIPS, and …

CVE-2026-3055 is a critical memory overread vulnerability (CWE-125) in Citrix NetScaler ADC and NetScaler Gateway when configured as a SAML IDP, caused by insuf…