# Citrix NetScaler vulnerabilities Source: https://junglewise.ai/threats/technologies/netscaler Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 04:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/netscaler.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 9 vulnerabilities in Citrix NetScaler: 1 in the last 7 days and 5 in the last 90 days, 8 of them critical and 8 exploited in the wild. The most recent, CVE-2026-107411, was published on 13 November 2026. Nothing in the last four weeks, down from 3 vulnerabilities in the four before. 0 critical against 3, 0 exploited in the wild against 3. ## Counts - Last 7 days: 1 - Last 30 days: 1 - Last 90 days: 5 - All time: 9 (8 critical, 8 exploited in the wild) ## About Citrix NetScaler Citrix NetScaler is an application delivery controller and load balancing appliance. ## Latest Citrix NetScaler vulnerabilities - [CVE-2026-107411: Citrix NetScaler memory overflow in RTSP ALG](https://junglewise.ai/threats/cve-2026-107411-memory-overflow-in-rtsp-alg-can-lead-to-unpredictable-or) (info, published 13 Nov 2026) - [CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability](https://junglewise.ai/threats/cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog) (critical, exploited in the wild, CVSS 7.5, published 4 Oct 2026) - [CVE-2026-88772: Citrix NetScaler ADC and Gateway remote code execution and denial of service](https://junglewise.ai/threats/cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler) (critical, exploited in the wild, published 27 Sep 2026) - [CVE-2026-88771: Citrix NetScaler ADC and Gateway improper input validation](https://junglewise.ai/threats/cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc) (critical, exploited in the wild, published 27 Sep 2026) - [CVE-2026-19490: Citrix NetScaler authentication bypass via alternate path](https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path) (critical, exploited in the wild, CVSS 9.8, published 19 Aug 2026) - [CVE-2026-3055: Citrix NetScaler out-of-bounds read in SAML IdP](https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp) (critical, exploited in the wild, CVSS 9.8, published 30 Mar 2026) - [CVE-2025-7775: Citrix NetScaler memory overflow in ADC and Gateway](https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway) (critical, exploited in the wild, CVSS 9.8, published 26 Aug 2025) - [CVE-2019-12991: Citrix SD-WAN and NetScaler Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-12991-citrix-sd-wan-and-netscaler-command-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 Mar 2022) - [CVE-2019-12989: Citrix SD-WAN and NetScaler SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2019-12989-citrix-sd-wan-and-netscaler-sql-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) ## Most severe Citrix NetScaler vulnerabilities - [CVE-2026-3055: Citrix NetScaler out-of-bounds read in SAML IdP](https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp) (critical, exploited in the wild, CVSS 9.8, published 30 Mar 2026) - [CVE-2026-19490: Citrix NetScaler authentication bypass via alternate path](https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path) (critical, exploited in the wild, CVSS 9.8, published 19 Aug 2026) - [CVE-2025-7775: Citrix NetScaler memory overflow in ADC and Gateway](https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway) (critical, exploited in the wild, CVSS 9.8, published 26 Aug 2025) - [CVE-2019-12989: Citrix SD-WAN and NetScaler SQL Injection Vulnerability](https://junglewise.ai/threats/cve-2019-12989-citrix-sd-wan-and-netscaler-sql-injection-vulnerability) (critical, exploited in the wild, CVSS 9.8, published 25 Mar 2022) - [CVE-2019-12991: Citrix SD-WAN and NetScaler Command Injection Vulnerability](https://junglewise.ai/threats/cve-2019-12991-citrix-sd-wan-and-netscaler-command-injection-vulnerability) (critical, exploited in the wild, CVSS 8.8, published 25 Mar 2022) - [CVE-2026-88779: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability](https://junglewise.ai/threats/cve-2026-88779-cisa-adds-one-known-exploited-vulnerability-to-catalog) (critical, exploited in the wild, CVSS 7.5, published 4 Oct 2026) - [CVE-2026-88772: Citrix NetScaler ADC and Gateway remote code execution and denial of service](https://junglewise.ai/threats/cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler) (critical, exploited in the wild, published 27 Sep 2026) - [CVE-2026-88771: Citrix NetScaler ADC and Gateway improper input validation](https://junglewise.ai/threats/cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc) (critical, exploited in the wild, published 27 Sep 2026) - [CVE-2026-107411: Citrix NetScaler memory overflow in RTSP ALG](https://junglewise.ai/threats/cve-2026-107411-memory-overflow-in-rtsp-alg-can-lead-to-unpredictable-or) (info, published 13 Nov 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 3 vulnerabilities in the four before. 0 critical against 3, 0 exploited in the wild against 3. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 1 | 1 | 1 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 2 | 2 | 2 | | 28 Sep 2026 | 1 | 1 | 1 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 1 | 0 | 0 | ## Other Citrix technologies - [Citrix NetScaler Gateway](https://junglewise.ai/threats/technologies/gateway): 38 vulnerabilities - [Citrix NetScaler ADC](https://junglewise.ai/threats/technologies/netscaler-adc): 26 vulnerabilities - [Citrix XenServer](https://junglewise.ai/threats/technologies/xenserver): 11 vulnerabilities - [Citrix Application Delivery Controller (ADC)](https://junglewise.ai/threats/technologies/application-delivery-controller-adc): 5 vulnerabilities - [Citrix Provisioning Services](https://junglewise.ai/threats/technologies/provisioning-services): 5 vulnerabilities - [Citrix Sd-Wan Wanop Appliance](https://junglewise.ai/threats/technologies/sd-wan-wanop-appliance): 4 vulnerabilities - [Citrix UniconOS](https://junglewise.ai/threats/technologies/uniconos): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Citrix NetScaler vulnerabilities", https://junglewise.ai/threats/technologies/netscaler, 13 November 2026.