Patchfirst
Patchfirst

Vendor

Citrix

27 of 31 Citrix CVEs in Patchfirst (87%) are in of vulnerabilities exploited in the wild, 7 of them used by ransomware.

CVEs
31
In CISA KEV
2787%
Known ransomware use
7
Median days to KEV
37
from publication
Latest KEV listing
4 Oct 2026
Watch Citrix Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • NetScaler In KEV: 6 CVEs: 6
  • NetScaler ADC and NetScaler Gateway In KEV: 5 CVEs: 5
  • Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance In KEV: 4 CVEs: 4
  • NetScaler ADC and Gateway In KEV: 2 CVEs: 2
  • SD-WAN and NetScaler In KEV: 2 CVEs: 2
  • Session Recording In KEV: 2 CVEs: 2
  • Application Delivery Controller (ADC) and Gateway In KEV: 1 CVEs: 1
  • Content Collaboration In KEV: 1 CVEs: 1
  • NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server In KEV: 1 CVEs: 1
  • ShareFile In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with Citrix CVEs
Open in ATT&CK Navigator

Counts are Citrix CVEs linked to the technique. Each link’s provenance is on the CVE page.

Citrix CVEs

31 CVEs, by priority
  1. CVE-2023-3519Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
    Citrix · NetScaler ADC and NetScaler GatewayKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1574Hijack Execution Flow+2 more · 6 reports
    99.7%Top 0.05%
    89.9priority
  2. CVE-2019-19781Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVRansomwarePublic exploitCritical · 9.8T1133External Remote ServicesT1059Command and Scripting Interpreter+1 more · 8 reports
    >99.9%Top 0.01%
    89.9priority
  3. CVE-2025-5777Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
    Citrix · NetScaler ADC and GatewayKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1555Credentials from Password Stores1 report
    >99.9%Top 0.02%
    82.1priority
  4. CVE-2023-4966Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
    Citrix · NetScaler ADC and NetScaler GatewayKEVRansomwarePublic exploitHigh · 7.5T1574Hijack Execution FlowT1005Data from Local System1 report
    >99.9%Top 0.01%
    82.1priority
  5. CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability
    Citrix · NetScalerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    82.2%Top 0.34%
    79.8priority
  6. CVE-2023-24489Citrix Content Collaboration ShareFile Improper Access Control Vulnerability
    Citrix · Content CollaborationKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    97.3%Top 0.1%
    79.8priority
  7. CVE-2021-22941Citrix ShareFile Improper Access Control Vulnerability
    Citrix · ShareFileKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    53.6%Top 1%
    79.7priority
  8. CVE-2026-19490Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
    Citrix · NetScalerKEVPublic exploitCritical · 9.8
    32.7%Top 1.7%
    79.5priority
  9. CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
    Citrix · NetScalerKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    78.2%Top 0.42%
    78.6priority
  10. CVE-2019-13608Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability
    Citrix · StoreFront ServerKEVRansomwarePublic exploitHigh · 7.5T1078Valid AccountsT1059Command and Scripting Interpreter+3 more
    30.0%Top 1.8%
    77.9priority
  11. CVE-2019-11634Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability
    Citrix · Workspace Application and Receiver for WindowsKEVRansomwareCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts+5 more · 1 report
    8.1%Top 5.2%
    77.7priority
  12. CVE-2020-8195Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVPublic exploitMedium · 6.5T1056Input CaptureT1082System Information Discovery+1 more
    33.0%Top 1.6%
    77.2priority
  13. CVE-2020-8196Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVPublic exploitMedium · 4.3T1056Input CaptureT1082System Information Discovery+1 more
    26.3%Top 2%
    75.6priority
  14. CVE-2026-3055Citrix NetScaler Out-of-Bounds Read Vulnerability
    Citrix · NetScalerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System
    91.5%Top 0.19%
    74.8priority
  15. CVE-2026-8452Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer…
    Citrix · NetScaler ADC and NetScaler GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1499.004Application or System Exploitation
    1.0%Top 37%
    72.5priority
  16. CVE-2022-27518Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
    Citrix · Application Delivery Controller (ADC) and GatewayKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    6.9%Top 6%
    72.5priority
  17. CVE-2026-88779Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
    Citrix · NetScalerKEVHigh · 7.5T1190Exploit Public-Facing Application
    11.4%Top 4%
    72.4priority
  18. CVE-2019-12989Citrix SD-WAN and NetScaler SQL Injection Vulnerability
    Citrix · SD-WAN and NetScalerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    95.0%Top 0.14%
    69.8priority
  19. CVE-2017-6316Citrix Multiple Products Remote Code Execution Vulnerability
    Citrix · NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile ServerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    73.0%Top 0.55%
    69.8priority
  20. CVE-2025-7775Citrix NetScaler Memory Overflow Vulnerability
    Citrix · NetScalerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more
    20.7%Top 2.5%
    69.4priority
  21. CVE-2019-12991Citrix SD-WAN and NetScaler Command Injection Vulnerability
    Citrix · SD-WAN and NetScalerKEVPublic exploitHigh · 8.8T1190Exploit Public-Facing Application
    74.5%Top 0.51%
    69.1priority
  22. CVE-2025-6543Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
    Citrix · NetScaler ADC and GatewayKEVPublic exploitCritical · 9.8T1059Command and Scripting InterpreterT1498Network Denial of Service
    10.4%Top 4.3%
    69.0priority
  23. CVE-2024-8069Citrix Session Recording Deserialization of Untrusted Data Vulnerability
    Citrix · Session RecordingKEVPublic exploitHigh · 8.0T1078Valid AccountsT1059Command and Scripting Interpreter
    21.1%Top 2.4%
    68.1priority
  24. CVE-2023-6549Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
    Citrix · NetScaler ADC and NetScaler GatewayKEVPublic exploitHigh · 7.5T1574Hijack Execution FlowT1499Endpoint Denial of Service
    57.6%Top 0.92%
    68.1priority
  25. CVE-2020-8193Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
    Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceKEVPublic exploitMedium · 6.5T1556Modify Authentication ProcessT1005Data from Local System
    88.3%Top 0.23%
    67.5priority
  26. CVE-2024-8068Citrix Session Recording Improper Privilege Management Vulnerability
    Citrix · Session RecordingKEVPublic exploitHigh · 8.0T1078Valid AccountsT1068Exploitation for Privilege Escalation
    3.5%Top 11%
    66.4priority
  27. CVE-2022-27510Unauthorized access to Gateway user capabilities
    Citrix · Citrix Gateway, Citrix ADC Critical · 9.8
    1.1%Top 34%
    66.4priority
  28. CVE-2023-24488Cross site scripting
    Citrix · Citrix ADC and Citrix Gateway Public exploitMedium · 6.1
    81.2%Top 0.37%
    64.2priority
  29. CVE-2023-3466Reflected Cross-Site Scripting (XSS)
    Citrix · NetScaler ADC High · 8.31 report
    2.6%Top 15%
    64.1priority
  30. CVE-2023-6548Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
    Citrix · NetScaler ADC and NetScaler GatewayKEVHigh · 8.8T1055Process Injection
    3.2%Top 12%
    61.8priority
  31. CVE-2023-3467Privilege Escalation to root administrator (nsroot)
    Citrix · NetScaler ADC High · 8.01 report
    1.3%Top 29%
    60.9priority
↑ ↓ chooseEnter openEsc close