{"schema_version":1,"title":"Citrix vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 53 vulnerabilities in Citrix: 8 in the last 7 days and 13 in the last 90 days, 29 of them critical and 26 exploited in the wild. The most recent, CVE-2026-88778, was published on 27 September 2026. 7 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/citrix","json_url":"https://junglewise.ai/threats/vendors/citrix.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/citrix","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":8,"all_time":53,"critical":29,"exploited":26,"last_7_days":8,"last_30_days":9,"last_90_days":13,"last_365_days":16},"latest":[{"cve":"CVE-2026-88778","slug":"cve-2026-88778-predictable-exact-value-from-previous-values-vulnerability-in","title":"Citrix NetScaler ADC predictable value generation","severity":"info","exploited":false,"published_at":"2026-09-27T17:16:57.11+00:00","url":"https://junglewise.ai/threats/cve-2026-88778-predictable-exact-value-from-previous-values-vulnerability-in"},{"cve":"CVE-2026-88777","slug":"cve-2026-88777-memory-overflow-vulnerability-vulnerability-in-citrix-netscaler","title":"Citrix NetScaler ADC and Gateway memory overflow","severity":"info","exploited":false,"published_at":"2026-09-27T17:16:56.99+00:00","url":"https://junglewise.ai/threats/cve-2026-88777-memory-overflow-vulnerability-vulnerability-in-citrix-netscaler"},{"cve":"CVE-2026-88776","slug":"cve-2026-88776-memory-overflow-vulnerability-vulnerability-in-citrix-netscaler","title":"Citrix NetScaler ADC memory overflow","severity":"info","exploited":false,"published_at":"2026-09-27T17:16:56.87+00:00","url":"https://junglewise.ai/threats/cve-2026-88776-memory-overflow-vulnerability-vulnerability-in-citrix-netscaler"},{"cve":"CVE-2026-88775","slug":"cve-2026-88775-memory-overflow-vulnerability-in-citrix-netscaler-adc-and-citrix","title":"Citrix NetScaler ADC memory overflow","severity":"info","exploited":false,"published_at":"2026-09-27T17:16:56.75+00:00","url":"https://junglewise.ai/threats/cve-2026-88775-memory-overflow-vulnerability-in-citrix-netscaler-adc-and-citrix"},{"cve":"CVE-2026-88774","slug":"cve-2026-88774-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler","title":"Citrix NetScaler ADC and Gateway feature policy bypass","severity":"info","exploited":false,"published_at":"2026-09-27T17:16:56.633+00:00","url":"https://junglewise.ai/threats/cve-2026-88774-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler"},{"cve":"CVE-2026-88773","slug":"cve-2026-88773-inconsistent-interpretation-of-http-requests-http-request","title":"Citrix NetScaler ADC HTTP Request/Response smuggling","severity":"info","exploited":false,"published_at":"2026-09-27T17:16:56.507+00:00","url":"https://junglewise.ai/threats/cve-2026-88773-inconsistent-interpretation-of-http-requests-http-request"},{"cve":"CVE-2026-88772","slug":"cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler","title":"Citrix NetScaler ADC and Gateway remote code execution and denial of service","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.39+00:00","url":"https://junglewise.ai/threats/cve-2026-88772-vulnerability-in-citrix-netscaler-adc-and-citrix-netscaler"},{"cve":"CVE-2026-88771","slug":"cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc","title":"Citrix NetScaler ADC and Gateway improper input validation","severity":"critical","exploited":true,"published_at":"2026-09-27T17:16:56.26+00:00","url":"https://junglewise.ai/threats/cve-2026-88771-improper-input-validation-vulnerability-in-citrix-netscaler-adc"},{"cve":"CVE-2026-19490","cvss":9.8,"epss":0.0701,"slug":"cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path","title":"Citrix NetScaler authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path"},{"cve":"CVE-2026-18751","cvss":5.2,"epss":0.0018,"slug":"cve-2026-18751-citrix-workspace-app-macos-arbitrary-root-file-modification","title":"Citrix WorkSpace App macOS arbitrary root file modification","severity":"info","exploited":false,"published_at":"2026-08-18T13:17:20.73+00:00","url":"https://junglewise.ai/threats/cve-2026-18751-citrix-workspace-app-macos-arbitrary-root-file-modification"},{"cve":"CVE-2026-53565","cvss":8.5,"slug":"cve-2026-53565-citrix-secure-access-client-improper-privilege-management","title":"Citrix Secure Access Client improper privilege management","severity":"info","exploited":false,"published_at":"2026-07-14T13:18:58.463+00:00","url":"https://junglewise.ai/threats/cve-2026-53565-citrix-secure-access-client-improper-privilege-management"},{"cve":"CVE-2026-8452","cvss":8.8,"epss":0.0101,"slug":"cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa","title":"NetScaler ADC and Gateway memory overflow in Gateway or AAA virtual server","severity":"critical","exploited":true,"published_at":"2026-06-30T13:19:33.45+00:00","url":"https://junglewise.ai/threats/cve-2026-8452-netscaler-adc-and-gateway-memory-overflow-in-gateway-or-aaa"},{"cve":"CVE-2026-10816","slug":"cve-2026-10816-citrix-netscaler-adc-and-gateway-arbitrary-file-read-in","title":"Citrix NetScaler ADC and Gateway arbitrary file read in management interface","severity":"info","exploited":false,"published_at":"2026-06-30T13:17:04.22+00:00","url":"https://junglewise.ai/threats/cve-2026-10816-citrix-netscaler-adc-and-gateway-arbitrary-file-read-in"},{"cve":"CVE-2025-66391","cvss":8.8,"epss":0.0038,"slug":"cve-2025-66391-citrix-cloud-improper-access-control-in-identity-management","title":"Citrix Cloud improper access control in identity management workflows","severity":"high","exploited":false,"published_at":"2026-06-17T14:17:31.467+00:00","url":"https://junglewise.ai/threats/cve-2025-66391-citrix-cloud-improper-access-control-in-identity-management"},{"cve":"CVE-2026-3055","cvss":9.8,"epss":0.7409,"slug":"cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp","title":"Citrix NetScaler out-of-bounds read in SAML IdP","severity":"critical","exploited":true,"published_at":"2026-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp"},{"cve":"CVE-2026-4368","cvss":7.7,"slug":"cve-2026-4368-race-condition-in-netscaler-adc-and-netscaler-gateway-when","title":"Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA v","severity":"info","exploited":false,"published_at":"2026-03-23T21:17:17.667+00:00","url":"https://junglewise.ai/threats/cve-2026-4368-race-condition-in-netscaler-adc-and-netscaler-gateway-when"},{"cve":"CVE-2025-7775","cvss":9.8,"epss":0.0983,"slug":"cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway","title":"Citrix NetScaler memory overflow in ADC and Gateway","severity":"critical","exploited":true,"published_at":"2025-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway"},{"cve":"CVE-2024-8068","cvss":8,"epss":0.0805,"slug":"cve-2024-8068-citrix-session-recording-privilege-escalation-in-networkservice","title":"Citrix Session Recording privilege escalation in NetworkService account","severity":"critical","exploited":true,"published_at":"2025-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8068-citrix-session-recording-privilege-escalation-in-networkservice"},{"cve":"CVE-2024-8069","cvss":8,"epss":0.6629,"slug":"cve-2024-8069-citrix-session-recording-deserialization-of-untrusted-data","title":"Citrix Session Recording deserialization of untrusted data","severity":"critical","exploited":true,"published_at":"2025-08-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-8069-citrix-session-recording-deserialization-of-untrusted-data"},{"cve":"CVE-2025-5777","cvss":9.3,"epss":0.6497,"slug":"cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read","title":"Citrix NetScaler ADC and Gateway out-of-bounds read","severity":"critical","exploited":true,"published_at":"2025-07-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-5777-citrix-netscaler-adc-and-gateway-out-of-bounds-read"},{"cve":"CVE-2025-6543","cvss":9.8,"epss":0.0089,"slug":"cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow","title":"Citrix NetScaler ADC and Gateway buffer overflow","severity":"critical","exploited":true,"published_at":"2025-06-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow"},{"cve":"CVE-2023-6549","cvss":8.2,"slug":"cve-2023-6549-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow","title":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6549-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow"},{"cve":"CVE-2023-6548","cvss":8.8,"slug":"cve-2023-6548-citrix-netscaler-adc-and-netscaler-gateway-code-injection","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2024-01-17T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-6548-citrix-netscaler-adc-and-netscaler-gateway-code-injection"},{"cve":"CVE-2023-4966","cvss":9.4,"slug":"cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow","title":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-10-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-4966-citrix-netscaler-adc-and-netscaler-gateway-buffer-overflow"},{"cve":"CVE-2023-24489","cvss":9.8,"slug":"cve-2023-24489-citrix-content-collaboration-sharefile-improper-access-control","title":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-24489-citrix-content-collaboration-sharefile-improper-access-control"}],"vendor":{"hub":true,"name":"Citrix","slug":"citrix","description":"Citrix Systems provides virtualization, networking, and cloud computing software solutions.","url":"https://junglewise.ai/threats/vendors/citrix"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":1,"exploited":1,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":2,"exploited":2,"vulnerabilities":8},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-3055","cvss":9.8,"epss":0.7409,"slug":"cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp","title":"Citrix NetScaler out-of-bounds read in SAML IdP","severity":"critical","exploited":true,"published_at":"2026-03-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-3055-citrix-netscaler-out-of-bounds-read-in-saml-idp"},{"cve":"CVE-2025-7775","cvss":9.8,"epss":0.0983,"slug":"cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway","title":"Citrix NetScaler memory overflow in ADC and Gateway","severity":"critical","exploited":true,"published_at":"2025-08-26T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-7775-citrix-netscaler-memory-overflow-in-adc-and-gateway"},{"cve":"CVE-2026-19490","cvss":9.8,"epss":0.0701,"slug":"cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path","title":"Citrix NetScaler authentication bypass via alternate path","severity":"critical","exploited":true,"published_at":"2026-09-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-19490-citrix-netscaler-authentication-bypass-via-alternate-path"},{"cve":"CVE-2025-6543","cvss":9.8,"epss":0.0089,"slug":"cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow","title":"Citrix NetScaler ADC and Gateway buffer overflow","severity":"critical","exploited":true,"published_at":"2025-06-30T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-6543-citrix-netscaler-adc-and-gateway-buffer-overflow"},{"cve":"CVE-2023-24489","cvss":9.8,"slug":"cve-2023-24489-citrix-content-collaboration-sharefile-improper-access-control","title":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2023-08-16T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-24489-citrix-content-collaboration-sharefile-improper-access-control"},{"cve":"CVE-2023-3519","cvss":9.8,"slug":"cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection","title":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2023-07-19T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-3519-citrix-netscaler-adc-and-netscaler-gateway-code-injection"},{"cve":"CVE-2022-27518","cvss":9.8,"slug":"cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway","title":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-27518-citrix-application-delivery-controller-adc-and-gateway"},{"cve":"CVE-2017-6316","cvss":9.8,"slug":"cve-2017-6316-citrix-multiple-products-remote-code-execution-vulnerability","title":"Citrix Multiple Products Remote Code Execution Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2017-6316-citrix-multiple-products-remote-code-execution-vulnerability"},{"cve":"CVE-2021-22941","cvss":9.8,"slug":"cve-2021-22941-citrix-sharefile-improper-access-control-vulnerability","title":"Citrix ShareFile Improper Access Control Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2021-22941-citrix-sharefile-improper-access-control-vulnerability"},{"cve":"CVE-2019-12989","cvss":9.8,"slug":"cve-2019-12989-citrix-sd-wan-and-netscaler-sql-injection-vulnerability","title":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","severity":"critical","exploited":true,"published_at":"2022-03-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-12989-citrix-sd-wan-and-netscaler-sql-injection-vulnerability"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"Citrix NetScaler Gateway","slug":"gateway","vulnerabilities":32,"url":"https://junglewise.ai/threats/technologies/gateway"},{"name":"Citrix NetScaler ADC","slug":"netscaler-adc","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/netscaler-adc"},{"name":"Citrix XenServer","slug":"xenserver","vulnerabilities":11,"url":"https://junglewise.ai/threats/technologies/xenserver"},{"name":"Citrix NetScaler","slug":"netscaler","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/netscaler"},{"name":"Citrix Application Delivery Controller (ADC)","slug":"application-delivery-controller-adc","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/application-delivery-controller-adc"},{"name":"Citrix Provisioning Services","slug":"provisioning-services","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/provisioning-services"},{"name":"Citrix Sd-Wan Wanop Appliance","slug":"sd-wan-wanop-appliance","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/sd-wan-wanop-appliance"}]}