Skip to content
OpenAdvisories

Vendor

NetScaler

26 known vulnerabilities.

NetScaler at a glance

Last 12 months
13
Critical · all time
7
Exploited · all time
7
Public exploit · all time
12

1 of the exploited vulnerabilities are known to be used by ransomware (CISA).

New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 2 vulnerabilities, 1 critical Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 6 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 2 vulnerabilities, 1 critical September 2026: 0 vulnerabilities Sep October 2026: 2 vulnerabilities, 1 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202621
Sep 202600
Aug 202621
Jul 202600
Jun 202660
May 202600
Apr 202600
Mar 202621
Feb 202600
Jan 202600
Dec 202500
Nov 202510
Oct 202500
Sep 202500
Aug 202531
Jul 202500
Jun 202542
May 202500
Apr 202500
Mar 202500
Feb 202510
Jan 202500
Dec 202400

Products

ADC 19 Gateway 18 NetScaler Gateway 3 Agent 2 NetScaler ADC 2 Console 2 NetScaler Console 1 SDX 1 SDX (SVM) 1

Latest advisories

  • High max 8.7
    NCSC-2026-0399 1 CVE 1 exploited

    Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway

    Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en NetScaler Gateway.

    NetScaler
  • Critical max 9.3
    NCSC-2026-0318 2 CVEs 1 exploited rev. 2

    Kwetsbaarheden verholpen in Citrix NetScaler ADC en NetScaler Gateway

    Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway.

    Citrix NetScaler
    first Aug 20, 2026
  • High max 8.8
    NCSC-2026-0216 6 CVEs 1 exploited rev. 2

    Kwetsbaarheden verholpen in Citrix Netscaler ADC en Netscaler Gateway

    Citrix heeft kwetsbaarheden verholpen in NetScaler ADC en NetScaler Gateway die verband houden met onvoldoende invoervalidatie, onjuiste toegangscontrole en het onjuist vrijgeven van geheugen.

    NetScaler
    first Jun 30, 2026
  • Critical max 9.2
    NCSC-2025-0203 1 CVE 1 exploited

    Kwetsbaarheid verholpen in Citrix NetScaler ADC en NetScaler Gateway

    Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en NetScaler Gateway. Om kwetsbaar te zijn moet NetScaler worden geconfigureerd als Gateway (VPN-virtuele server, ICA Proxy, CVPN, RDP Proxy) of AAA virtual server. Let op, dit is vaak default config.

    NetScaler
  • High max 8.5
    NCSC-2024-0288 7 CVEs rev. 2

    Kwetsbaarheden verholpen in Citrix Workspace, NetScaler ADC en NetScaler Gateway

    Cirtix heeft een aantal kwetsbaarheden verholpen in Workspace, NetScaler ADC en NetScaler Gateway

    Citrix NetScaler NetSclaer
    first Jul 10, 2024
All Critical High Medium Low Exploited only Public exploit

26 results · Feed

  • Critical 9.5
    CVE-2026-107406 Public exploit

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:   * For…

    NetScaler ADC Gateway
  • High 8.7
    CVE-2026-88779 Exploited EPSS 11%

    Memory overflow vulnerability leading to Denial of Service

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

    NetScaler ADC Gateway
    KEV Oct 4, 2026
  • Critical 9.3
    CVE-2026-19490 Exploited Public exploit EPSS 33%

    NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

    NetScaler ADC Gateway
    KEV Sep 9, 2026
  • High 8.8
    CVE-2026-19489 Public exploit

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 thr…

    NetScaler ADC Gateway
  • High 8.7
    CVE-2026-13474

    Denial of service via malformed HTTP/2 requests

    Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

    NetScaler ADC Gateway
  • Medium 6.9
    CVE-2026-10817 Public exploit

    Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

    NetScaler ADC Gateway
  • High 7.1
    CVE-2026-10816

    Arbitrary File Read (Unauthenticated)

    Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

    NetScaler ADC Gateway
  • High 8.8
    CVE-2026-8655

    Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service

    Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetSca…

    NetScaler ADC Gateway
  • High 8.8
    CVE-2026-8452 Exploited Public exploit

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

    NetScaler ADC Gateway
    KEV Aug 26, 2026
  • High 8.8
    CVE-2026-8451 Public exploit EPSS 14%

    Insufficient input validation leading to memory overread

    Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

    NetScaler ADC Gateway
  • Critical 9.3
    CVE-2026-3055 Exploited Public exploit EPSS 91%

    Insufficient input validation leading to memory overread

    Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

    NetScaler ADC Gateway
    KEV Mar 30, 2026
  • High 7.7
    CVE-2026-4368

    Race Condition leading to User Session Mixup

    Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup

    NetScaler ADC Gateway
  • Medium 5.9
    CVE-2025-12101 Public exploit EPSS 26%

    Cross-Site Scripting (XSS)

    Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
  • High 8.7
    CVE-2025-8424

    Improper access control on the NetScaler Management Interface

    Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access

    NetScaler ADC Gateway
  • High 8.8
    CVE-2025-7776

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to …

    NetScaler ADC Gateway
  • Critical 9.2
    CVE-2025-7775 Exploited Public exploit EPSS 21%

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC an…

    NetScaler ADC Gateway
    KEV Aug 26, 2025
  • Critical 9.2
    CVE-2025-6543 Exploited Public exploit EPSS 10%

    Memory overflow vulnerability leading to unintended control flow and Denial of Service

    Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jun 30, 2025
  • Medium 6.9
    CVE-2025-4365

    NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read

    Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)

    NetScaler Console SDX (SVM)
  • High 8.7
    CVE-2025-5349 Public exploit

    NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

    Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

    NetScaler ADC
  • Critical 9.3
    CVE-2025-5777 Exploited · Ransomware Public exploit EPSS 100%

    NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jul 10, 2025
  • High 8.8
    CVE-2024-12284 EPSS 13%

    Authenticated privilege escalation

    Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.

    NetScaler Agent Console
  • Medium 5.8
    CVE-2024-8535

    Authenticated user can access unintended user capabilities

    Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources…

    NetScaler NetScaler Gateway NetScaler ADC
  • High 8.4
    CVE-2024-8534

    Memory safety vulnerability leading to memory corruption and Denial of Service

    Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) …

    NetScaler NetSclaer NetScaler Gateway NetScaler ADC
  • High 7.1
    CVE-2024-6236

    Denial of Service

    Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX

    NetScaler NetSclaer Agent NetScaler Console
  • Critical 9.4
    CVE-2024-6235 EPSS 21%

    Sensitive information disclosure

    Sensitive information disclosure in NetScaler Console

    NetScaler NetScaler Console
  • High 7.2
    CVE-2024-5491

    Denial of Service

    Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler

    NetScaler NetScaler Gateway NetScaler ADC