CI
Vendor
Citrix
650
CVEs
64
On KEV
5
New 30D
Products
NA10.0
NetScaler ADC
Network Security
69 CVEs13 on KEV1 new
UN8.5
UniconOS
Citrix
3 CVEs0 on KEV3 new
WA7.8
Workspace app for Windows
Citrix
2 CVEs0 on KEV1 new
AD9.8
Application Delivery Controller Firmware
Citrix
30 CVEs5 on KEV0 new
GF9.8
Gateway Firmware
Citrix
14 CVEs5 on KEV0 new
NA9.8
NetScaler ADC and NetScaler Gateway
Citrix
5 CVEs5 on KEV0 new
NG9.8
Netscaler Gateway Firmware
Citrix
31 CVEs4 on KEV0 new
AD9.8
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance
Citrix
4 CVEs4 on KEV0 new
NS9.8
Netscaler Sd-wan
Citrix
16 CVEs3 on KEV0 new
SW8.8
Sd-wan Wanop
Citrix
10 CVEs3 on KEV0 new
SD9.8
Sd-wan
Citrix
18 CVEs2 on KEV0 new
NA9.8
NetScaler ADC and Gateway
Citrix
2 CVEs2 on KEV0 new
SA9.8
SD-WAN and NetScaler
Citrix
2 CVEs2 on KEV0 new
SR8.0
Session Recording
Citrix
2 CVEs2 on KEV0 new
WO9.8
Workspace
Citrix
14 CVEs1 on KEV0 new
SS9.8
Sharefile Storagezones Controller
Citrix
8 CVEs1 on KEV0 new
SH9.8
ShareFile
Citrix
3 CVEs1 on KEV0 new
SS7.5
StoreFront Server
Citrix
3 CVEs1 on KEV0 new
GP7.8
Gateway Plug-in For Linux
Citrix
2 CVEs1 on KEV0 new
RE9.8
Receiver
Citrix
2 CVEs1 on KEV0 new
AD9.8
Application Delivery Controller (ADC) and Gateway
Citrix
1 CVEs1 on KEV0 new
CG9.8
Citrix Gateway, Citrix ADC
Citrix
1 CVEs1 on KEV0 new
CS8.0
Citrix Session Recording
Citrix
1 CVEs1 on KEV0 new
CS9.8
Citrix ShareFile Storage Zones Controller
Citrix
1 CVEs1 on KEV0 new
CC9.8
Content Collaboration
Citrix
1 CVEs1 on KEV0 new
NS9.8
NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server
Citrix
1 CVEs1 on KEV0 new
SS9.8
Sharefile Storage Zones Controller
Citrix
1 CVEs1 on KEV0 new
WA9.8
Workspace Application and Receiver for Windows
Citrix
1 CVEs1 on KEV0 new
XE9.9
XenServer
Citrix
50 CVEs0 on KEV0 new
NA9.8
Netscaler Application Delivery Controller Firmware
Citrix
29 CVEs0 on KEV0 new
XS9.8
Xenmobile Server
Citrix
22 CVEs0 on KEV0 new
AG–
Access Gateway
Citrix
14 CVEs0 on KEV0 new
ME–
Metaframe
Citrix
10 CVEs0 on KEV0 new
MP–
Metaframe Presentation Server
Citrix
9 CVEs0 on KEV0 new
VA8.8
Virtual Apps And Desktops
Citrix
9 CVEs0 on KEV0 new
XE–
Xen
Citrix
9 CVEs0 on KEV0 new
XE9.8
Xenapp
Citrix
9 CVEs0 on KEV0 new
CS–
Cloudportal Services Manager
Citrix
8 CVEs0 on KEV0 new
XE9.8
Xendesktop
Citrix
8 CVEs0 on KEV0 new
NA6.5
Netscaler Access Gateway
Citrix
7 CVEs0 on KEV0 new
NA6.5
Netscaler Access Gateway Firmware
Citrix
7 CVEs0 on KEV0 new
PS–
Presentation Server
Citrix
7 CVEs0 on KEV0 new
AE–
Access Essentials
Citrix
6 CVEs0 on KEV0 new
NF–
Nfuse
Citrix
6 CVEs0 on KEV0 new
PS9.8
Provisioning Services
Citrix
6 CVEs0 on KEV0 new
SA8.8
Secure Access Client
Citrix
6 CVEs0 on KEV0 new
AD10.0
Application Delivery Management
Citrix
5 CVEs0 on KEV0 new
WA7.8
WorkSpace App
Citrix
5 CVEs0 on KEV0 new
AD7.5
Application Delivery Controller
Citrix
4 CVEs0 on KEV0 new
CW7.8
Citrix Workspace app for Windows
Citrix
4 CVEs0 on KEV0 new
CL–
Cloudplatform
Citrix
4 CVEs0 on KEV0 new
DS–
Desktop Server
Citrix
4 CVEs0 on KEV0 new
NC8.8
Netscaler Console
Citrix
4 CVEs0 on KEV0 new
WI–
Web Interface
Citrix
4 CVEs0 on KEV0 new
XE8.8
Xencenterweb
Citrix
4 CVEs0 on KEV0 new
CS9.8
Citrix Sd-wan Center
Citrix
3 CVEs0 on KEV0 new
CC8.1
Command Center
Citrix
3 CVEs0 on KEV0 new
GP9.8
Gateway Plug-in
Citrix
3 CVEs0 on KEV0 new
NS9.8
Netscaler Sd-wan Center
Citrix
3 CVEs0 on KEV0 new
NS–
Netscaler Service Delivery Appliance Service VM
Citrix
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-53564 | UN UniconOS Citrix | 5.1 | Oct 13 | Arbitrary file read and write |
| CVE-2026-53563 | UN UniconOS Citrix | 6.9 | Oct 13 | Persistent Command Execution |
| CVE-2026-84419 | WA Workspace app for Windows Citrix | 6.8 | Oct 13 | Out-of-Bounds Write |
| CVE-2026-53562 | UN UniconOS Citrix | 8.5 | Oct 13 | Local Privilege Escalation |
| CVE-2026-88779 In wildKEV | NA NetScaler ADC Citrix | 7.5 | Oct 4 | Memory overflow vulnerability leading to Denial of Service |
| CVE-2026-88778 | NA NetScaler ADC Citrix | 7.5 | Sep 27 | TCP Initial Sequence Number (ISN) prediction |
| CVE-2026-88777 | NA NetScaler ADC Citrix | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88776 | NA NetScaler ADC Citrix | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88775 | NA NetScaler ADC Citrix | 9.8 | Sep 27 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service |
| CVE-2026-88773 | NA NetScaler ADC Citrix | 10.0 | Sep 27 | HTTP Request Smuggling |
| CVE-2026-88774 | NA NetScaler ADC Citrix | 7.2 | Sep 27 | Feature policy bypass due to improper HTTP URL based expression usage |
| CVE-2026-88772 In wildKEV | NA NetScaler ADC Citrix | 8.1 | Sep 27 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service |
| CVE-2026-88771 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Sep 27 | A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands |
| CVE-2026-78547 | CW Citrix Workspace app for Windows Citrix | 4.4 | Sep 11 | Out-of-Bounds Write |
| CVE-2026-19490 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Aug 19 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 |
| CVE-2026-18751 | WA WorkSpace App Citrix | 5.2 | Aug 18 | Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 |
| CVE-2026-53566 | CS Citrix Secure Access Client for Windows Citrix | 6.8 | Jul 14 | Out-of-bounds memory read |
| CVE-2026-53565 | CE Citrix Endpoint Analysis Client for Windows Citrix | 8.5 | Jul 14 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2026-13474 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Denial of service via malformed HTTP/2 requests |
| CVE-2026-10817 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Insufficient input validation leading to memory overread |
| CVE-2026-10816 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Arbitrary File Read (Unauthenticated) |
| CVE-2026-8655 | NA NetScaler ADC Citrix | 9.8 | Jun 30 | Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service |
| CVE-2026-8452 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Jun 30 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service |
| CVE-2026-8451 | NA NetScaler ADC Citrix | 7.5 | Jun 30 | Insufficient input validation leading to memory overread |
| CVE-2026-3055 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Mar 23 | Insufficient input validation leading to memory overread |
| CVE-2025-7776 | NA NetScaler ADC Citrix | 9.8 | Aug 26 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service |
| CVE-2025-7775 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Aug 26 | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service |
| CVE-2025-6759 | WV Windows Virtual Delivery Agent for CVAD and Citrix DaaS Citrix | 7.8 | Jul 8 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2025-6543 In wildKEV | NA NetScaler ADC Citrix | 9.8 | Jun 25 | Memory overflow vulnerability leading to unintended control flow and Denial of Service |
| CVE-2025-0320 | SA Secure Access Client for Windows Citrix | 7.8 | Jun 17 | Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2025-4879 | WA Workspace App for Windows Citrix | 7.8 | Jun 17 | Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2025-4365 | NS Netscaler Sdx Citrix | 7.5 | Jun 17 | NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read |
| CVE-2025-5349 | NA NetScaler ADC Citrix | 8.8 | Jun 17 | NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface |
| CVE-2025-5777 RansomwareIn wildKEV | NA NetScaler ADC Citrix | 7.5 | Jun 17 | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread |
| CVE-2025-1223 | SA Secure Access Client for Mac Citrix | 6.1 | Feb 20 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data |
| CVE-2025-1222 | SA Secure Access Client for Mac Citrix | 6.1 | Feb 20 | An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data |
| CVE-2024-12284 | NC Netscaler Console Citrix | 8.8 | Feb 19 | Authenticated privilege escalation |
| CVE-2024-8535 | NA NetScaler ADC Citrix | 8.1 | Nov 12 | Authenticated user can access unintended user capabilities |
| CVE-2024-8534 | NA NetScaler ADC Citrix | 8.1 | Nov 12 | Memory safety vulnerability leading to memory corruption and Denial of Service |
| CVE-2024-8069 In wildKEV | SR Session Recording Citrix | 8.0 | Nov 12 | Limited remote code execution with privilege of a NetworkService Account access |
| CVE-2024-8068 In wildKEV | CS Citrix Session Recording Citrix | 8.0 | Nov 12 | Privilege escalation to NetworkService Account access |
| CVE-2024-7890 | CW Citrix Workspace app for Windows Citrix | 7.3 | Sep 11 | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2024-7889 | CW Citrix Workspace app for Windows Citrix | 7.3 | Sep 11 | Local privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2024-42423 | WO Workspace Citrix | 7.1 | Sep 10 | Citrix Workspace App version 23.9.0.24.4 on Dell ThinOS 2311 contains an Incorrect Authorization vulnerability when Citrix CEB is enabled for WebLogin |
| CVE-2024-6677 | UB uberAgent Citrix | 7.8 | Jul 12 | Privilege escalation in uberAgent |
| CVE-2024-6149 | CW Citrix Workspace app for HTML5 Citrix | 6.1 | Jul 10 | Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 |
| CVE-2024-6148 | CW Citrix Workspace app for HTML5 Citrix | 8.8 | Jul 10 | Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 |
| CVE-2024-6150 | CP Citrix Provisioning Citrix | 4.3 | Jul 10 | A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning |
| CVE-2024-6286 | CW Citrix Workspace app for Windows Citrix | 7.8 | Jul 10 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2024-6151 | WV Windows Virtual Delivery Agent Citrix | 7.8 | Jul 10 | Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges |
| CVE-2024-6236 | NC Netscaler Console Citrix | 7.5 | Jul 10 | Denial of Service |
| CVE-2024-6235 | NC Netscaler Console Citrix | 8.8 | Jul 10 | Sensitive information disclosure |
| CVE-2024-5492 | NA NetScaler ADC Citrix | 6.1 | Jul 10 | Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites |
| CVE-2024-5491 | NA NetScaler ADC Citrix | 7.5 | Jul 10 | Denial of Service |
| CVE-2024-5661 | CH Citrix Hypervisor Citrix | 6.0 | Jun 13 | Potential Denial of Service affecting XenServer and Citrix Hypervisor |
| CVE-2024-3661 | SA Secure Access Client Citrix | 7.6 | May 6 | DHCP routing options can manipulate interface-based VPN traffic |
| CVE-2024-2049 | CS Citrix SD-WAN Standard/Premium Editions Citrix | 5.3 | Mar 12 | Server-Side Request Forgery (SSRF) |
| CVE-2023-6184 | VA Virtual Apps And Desktops Citrix | 7.2 | Jan 18 | Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting |
| CVE-2023-6549 In wildKEV | NA NetScaler ADC Citrix | 7.5 | Jan 17 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability |
| CVE-2023-6548 In wildKEV | NA NetScaler ADC Citrix | 8.8 | Jan 17 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability |