Product · Citrix

NetScaler Gateway

5 known vulnerabilities.

NetScaler Gateway at a glance

Last 12 months: 1
Critical · all time: 2
Exploited · all time: 2
Public exploit · all time: 2

2 of the exploited vulnerabilities are known to be used by ransomware (CISA).

New vulnerabilities per month · last 2412 months

Show as table

Month	Vulnerabilities	Critical
Nov 2026	1	0
Oct 2026	0	0
Sep 2026	0	0
Aug 2026	0	0
Jul 2026	0	0
Jun 2026	0	0
May 2026	0	0
Apr 2026	0	0
Mar 2026	0	0
Feb 2026	0	0
Jan 2026	0	0
Dec 2025	0	0
Nov 2025	0	0
Oct 2025	0	0
Sep 2025	0	0
Aug 2025	0	0
Jul 2025	0	0
Jun 2025	0	0
May 2025	0	0
Apr 2025	0	0
Mar 2025	0	0
Feb 2025	0	0
Jan 2025	0	0
Dec 2024	0	0

Most common weaknesses

Latest advisories

Critical max 9.5

NCSC-2026-0394 8 CVEs 2 exploited rev. 2

Kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway

Citrix heeft 8 kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway. De volgende ondersteunde versies van Citrix NetScaler ADC en Citrix NetScaler Gateway zijn kwetsbaar: - Citrix NetScaler ADC en Citrix NetScaler Gateway 14.1 vóór versie 14.1-73.37…

Citrix

Sep 30, 2026
first Sep 27, 2026
High max 9.3

NCSC-2026-0100 2 CVEs 1 exploited

Kwetsbaarheden verholpen in Citrix Netscaler ADC en Netscaler Gateway

Citrix heeft kwetsbaarheden verholpen in hun software die verband houden met onvoldoende invoervalidatie en een raceconditie in het sessiebeheer.

Citrix

Mar 23, 2026
High max 8.5

NCSC-2024-0288 7 CVEs rev. 2

Kwetsbaarheden verholpen in Citrix Workspace, NetScaler ADC en NetScaler Gateway

Cirtix heeft een aantal kwetsbaarheden verholpen in Workspace, NetScaler ADC en NetScaler Gateway

Citrix NetScaler NetSclaer

Jul 11, 2024
first Jul 10, 2024

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

High 8.7

CVE-2026-120860

Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Citrix NetScaler ADC  NetScaler Gateway Network devices

Nov 13, 2026
Critical 9.4

CVE-2023-4966 Exploited · Ransomware Public exploit Scanner template EPSS 100%

Unauthenticated sensitive information disclosure

Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

Citrix NetScaler ADC  NetScaler Gateway Network devices

Oct 10, 2023
KEV Oct 18, 2023
High 8.0

CVE-2023-3467

Privilege Escalation to root administrator (nsroot)

Citrix NetScaler ADC  NetScaler Gateway Network devices

Jul 19, 2023
High 8.3

CVE-2023-3466

Reflected Cross-Site Scripting (XSS)

Citrix NetScaler ADC  NetScaler Gateway Network devices

Jul 19, 2023
Critical 9.8

CVE-2023-3519 Exploited · Ransomware Public exploit Scanner template EPSS 100%

Unauthenticated remote code execution

Citrix NetScaler ADC  NetScaler Gateway Network devices

Jul 19, 2023
KEV Jul 19, 2023