{"schema_version":1,"title":"Citrix NetScaler Gateway vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 25 vulnerabilities in Citrix NetScaler Gateway: 0 in the last 7 days and 10 in the last 90 days, 16 of them critical and 15 exploited in the wild. The most recent, CVE-2026-53713, was published on 14 September 2026.","url":"https://junglewise.ai/threats/technologies/gateway","json_url":"https://junglewise.ai/threats/technologies/gateway.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/gateway","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":25,"critical":16,"exploited":15,"last_7_days":0,"last_30_days":4,"last_90_days":10,"last_365_days":13},"latest":[{"cve":"CVE-2026-53713","cvss":9.1,"epss":0.0043,"slug":"cve-2026-53713-envoy-gateway-authentication-bypass-in-envoyextensionpolicy-lua","title":"Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and","severity":"critical","exploited":false,"published_at":"2026-09-14T21:17:12.52+00:00","url":"https://junglewise.ai/threats/cve-2026-53713-envoy-gateway-authentication-bypass-in-envoyextensionpolicy-lua"},{"cve":"CVE-2026-19490","cvss":9.8,"epss":0.0701,"slug":"cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path","title":"Citrix NetScaler authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path"},{"cve":"CVE-2026-82270","cvss":7.5,"epss":0.0048,"slug":"cve-2026-82270-portkey-ai-gateway-server-side-request-forgery-in-v1-proxy","title":"Portkey AI Gateway server-side request forgery in /v1/proxy/","severity":"high","exploited":false,"published_at":"2026-08-28T20:20:17.797+00:00","url":"https://junglewise.ai/threats/cve-2026-82270-portkey-ai-gateway-server-side-request-forgery-in-v1-proxy"},{"cve":"CVE-2026-81664","cvss":5.3,"epss":0.004,"slug":"cve-2026-81664-openfaas-gateway-missing-authentication-on-system-telemetry","title":"OpenFaaS gateway missing authentication on /system/telemetry endpoint","severity":"medium","exploited":false,"published_at":"2026-08-27T17:20:55.97+00:00","url":"https://junglewise.ai/threats/cve-2026-81664-openfaas-gateway-missing-authentication-on-system-telemetry"},{"cve":"CVE-2026-8655","cvss":8.8,"slug":"cve-2026-8655-netscaler-adc-and-gateway-memory-overflows-in-dns-and-oracle-lb","title":"NetScaler ADC and Gateway memory overflows in DNS and Oracle LB","severity":"info","exploited":false,"published_at":"2026-06-30T13:19:34.083+00:00","url":"https://junglewise.ai/threats/cve-2026-8655-netscaler-adc-and-gateway-memory-overflows-in-dns-and-oracle-lb"},{"cve":"CVE-2026-8452","cvss":8.8,"epss":0.0101,"slug":"cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa","title":"NetScaler ADC and Gateway memory overflow in Gateway or AAA virtual server","severity":"critical","exploited":true,"published_at":"2026-06-30T13:19:33.45+00:00","url":"https://junglewise.ai/threats/cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa"},{"cve":"CVE-2026-8451","cvss":8.8,"slug":"cve-2026-8451-netscaler-adc-and-gateway-memory-overread-in-saml-idp","title":"NetScaler ADC and Gateway memory overread in SAML IdP","severity":"info","exploited":false,"published_at":"2026-06-30T13:19:33.347+00:00","url":"https://junglewise.ai/threats/cve-2026-8451-netscaler-adc-and-gateway-memory-overread-in-saml-idp"},{"cve":"CVE-2026-13474","cvss":8.7,"slug":"cve-2026-13474-netscaler-adc-and-gateway-denial-of-service-via-malformed-http-2","title":"NetScaler ADC and Gateway denial of service via malformed HTTP/2 requests","severity":"info","exploited":false,"published_at":"2026-06-30T13:17:09.61+00:00","url":"https://junglewise.ai/threats/cve-2026-13474-netscaler-adc-and-gateway-denial-of-service-via-malformed-http-2"},{"cve":"CVE-2026-10817","cvss":6.9,"slug":"cve-2026-10817-netscaler-adc-and-gateway-memory-overread-in-tcp-timestamp","title":"NetScaler ADC and Gateway memory overread in TCP TimeStamp handling","severity":"info","exploited":false,"published_at":"2026-06-30T13:17:04.363+00:00","url":"https://junglewise.ai/threats/cve-2026-10817-netscaler-adc-and-gateway-memory-overread-in-tcp-timestamp"},{"cve":"CVE-2026-10816","slug":"cve-2026-10816-citrix-netscaler-adc-and-gateway-arbitrary-file-read-in","title":"Citrix NetScaler ADC and Gateway arbitrary file read in management interface","severity":"info","exploited":false,"published_at":"2026-06-30T13:17:04.22+00:00","url":"https://junglewise.ai/threats/cve-2026-10816-citrix-netscaler-adc-and-gateway-arbitrary-file-read-in"},{"cve":"CVE-2026-3055","cvss":9.8,"epss":0.7409,"slug":"cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp","title":"Citrix NetScaler out-of-bounds read in SAML IdP","severity":"critical","exploited":true,"published_at":"2026-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp"},{"cve":"CVE-2026-4368","cvss":7.7,"slug":"cve-2026-4368-race-condition-in-netscaler-adc-and-netscaler-gateway-when","title":"Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA v","severity":"info","exploited":false,"published_at":"2026-03-23T21:17:17.667+00:00","url":"https://junglewise.ai/threats/cve-2026-4368-race-condition-in-netscaler-adc-and-netscaler-gateway-when"},{"cve":"CVE-2025-66405","cvss":4,"epss":0.0037,"slug":"cve-2025-66405-portkey-ai-gateway-server-side-request-forgery-in-custom-host","title":"Portkey.ai Gateway Server-Side Request Forgery in custom host header","severity":"medium","exploited":false,"published_at":"2025-12-02T01:08:37+00:00","url":"https://junglewise.ai/threats/cve-2025-66405-portkey-ai-gateway-server-side-request-forgery-in-custom-host"},{"cve":"CVE-2025-7775","cvss":9.8,"epss":0.0983,"slug":"cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway","title":"Citrix NetScaler memory overflow in ADC and Gateway","severity":"critical","exploited":true,"published_at":"2025-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway"},{"cve":"CVE-2025-5777","cvss":9.3,"epss":0.6497,"slug":"cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read","title":"Citrix NetScaler ADC and Gateway out-of-bounds read","severity":"critical","exploited":true,"published_at":"2025-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read"},{"cve":"CVE-2025-6543","cvss":9.8,"epss":0.0089,"slug":"cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow","title":"Citrix NetScaler ADC and Gateway buffer overflow","severity":"critical","exploited":true,"published_at":"2025-06-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow"},{"cve":"CVE-2023-6548","cvss":8.8,"slug":"cve-2023-6548-citrix-netscaler-adc-and-netscaler-gateway-code-injection","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6548-citrix-netscaler-adc-and-netscaler-gateway-code-injection"},{"cve":"CVE-2023-6549","cvss":8.2,"slug":"cve-2023-6549-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow","title":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6549-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow"},{"cve":"CVE-2023-4966","cvss":9.4,"slug":"cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow","title":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow"},{"cve":"CVE-2023-3519","cvss":9.8,"slug":"cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection"},{"cve":"CVE-2022-27518","cvss":9.8,"slug":"cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway","title":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway"},{"cve":"CVE-2020-8193","cvss":6.5,"slug":"cve-2020-8193-citrix-adc-gateway-and-sd-wan-wanop-appliance-authorization-bypass","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8193-citrix-adc-gateway-and-sd-wan-wanop-appliance-authorization-bypass"},{"cve":"CVE-2019-19781","cvss":9.8,"slug":"cve-2019-19781-citrix-adc-gateway-and-sd-wan-wanop-appliance-code-execution","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-19781-citrix-adc-gateway-and-sd-wan-wanop-appliance-code-execution"},{"cve":"CVE-2020-8195","cvss":6.5,"slug":"cve-2020-8195-citrix-adc-gateway-and-sd-wan-wanop-appliance-information","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8195-citrix-adc-gateway-and-sd-wan-wanop-appliance-information"},{"cve":"CVE-2020-8196","cvss":4.3,"slug":"cve-2020-8196-citrix-adc-gateway-and-sd-wan-wanop-appliance-information","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2020-8196-citrix-adc-gateway-and-sd-wan-wanop-appliance-information"}],"weekly":[{"week":"2026-06-29","critical":1,"exploited":1,"vulnerabilities":6},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-09-14","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vulnerabilities":12,"url":"https://junglewise.ai/threats/technologies/netscaler-adc"},{"name":"Citrix XenServer","slug":"xenserver","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/xenserver"},{"name":"Citrix Application Delivery Controller (ADC)","slug":"application-delivery-controller-adc","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/application-delivery-controller-adc"},{"name":"Citrix NetScaler","slug":"netscaler","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/netscaler"},{"name":"Citrix Provisioning Services","slug":"provisioning-services","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/provisioning-services"},{"name":"Citrix Sd-Wan Wanop Appliance","slug":"sd-wan-wanop-appliance","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/sd-wan-wanop-appliance"}],"technology":{"hub":true,"name":"Citrix NetScaler Gateway","slug":"gateway","vendor":{"name":"Citrix","slug":"citrix","url":"https://junglewise.ai/threats/vendors/citrix"},"aliases":["netscaler-gateway"],"category":"vpn-gateway","homepage":"https://www.citrix.com/products/citrix-gateway/","description":"A secure remote access solution providing VPN, load balancing, and application delivery capabilities.","url":"https://junglewise.ai/threats/technologies/gateway"},"most_severe":[{"cve":"CVE-2026-3055","cvss":9.8,"epss":0.7409,"slug":"cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp","title":"Citrix NetScaler out-of-bounds read in SAML IdP","severity":"critical","exploited":true,"published_at":"2026-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp"},{"cve":"CVE-2025-7775","cvss":9.8,"epss":0.0983,"slug":"cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway","title":"Citrix NetScaler memory overflow in ADC and Gateway","severity":"critical","exploited":true,"published_at":"2025-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway"},{"cve":"CVE-2026-19490","cvss":9.8,"epss":0.0701,"slug":"cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path","title":"Citrix NetScaler authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path"},{"cve":"CVE-2025-6543","cvss":9.8,"epss":0.0089,"slug":"cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow","title":"Citrix NetScaler ADC and Gateway buffer overflow","severity":"critical","exploited":true,"published_at":"2025-06-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow"},{"cve":"CVE-2023-3519","cvss":9.8,"slug":"cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection"},{"cve":"CVE-2022-27518","cvss":9.8,"slug":"cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway","title":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway"},{"cve":"CVE-2019-19781","cvss":9.8,"slug":"cve-2019-19781-citrix-adc-gateway-and-sd-wan-wanop-appliance-code-execution","title":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-19781-citrix-adc-gateway-and-sd-wan-wanop-appliance-code-execution"},{"cve":"CVE-2023-4966","cvss":9.4,"slug":"cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow","title":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow"},{"cve":"CVE-2025-5777","cvss":9.3,"epss":0.6497,"slug":"cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read","title":"Citrix NetScaler ADC and Gateway out-of-bounds read","severity":"critical","exploited":true,"published_at":"2025-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read"},{"cve":"CVE-2026-8452","cvss":8.8,"epss":0.0101,"slug":"cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa","title":"NetScaler ADC and Gateway memory overflow in Gateway or AAA virtual server","severity":"critical","exploited":true,"published_at":"2026-06-30T13:19:33.45+00:00","url":"https://junglewise.ai/threats/cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}