Vulnerabilities
Summary — last 7 days
New vulnerabilities3,333▲ 343 vs. last week
Critical / high1,493▲ 121 vs. last week
New active exploitation (KEV)7▼ 3 vs. last week
Unscored (no CVSS)592▲ 117 vs. last week
77 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Analyzed | High (8.8) | 0.38% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/29/2026 | Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23. | |
| Modified | High (8.8) | 0.38% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/29/2026 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior… | |
| Modified | High (8.8) | 0.38% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/29/2026 | Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to unpredictable or erroneous behavior… | |
| Modified | High (8.8) | 0.38% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/29/2026 | Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to… | |
| Modified | High (7) | 0.24% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/29/2026 | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression… | |
| Analyzed | Critical (9.3) | 0.36% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/29/2026 | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before… | |
| Analyzed | Critical (9.5) | 1.3% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/28/2026 | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service | |
| Analyzed | Critical (9.5) | 1.1% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 9/27/2026 | 9/29/2026 | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute… | |
| Analyzed | Critical (9.3) | 7.0% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 8/19/2026 | 9/10/2026 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21. | |
| Awaiting Analysis | High (8.8) | 3.2% | — | Citrix Netscaler ADCAICitrix Netscaler GatewayAI | 8/19/2026 | 9/1/2026 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21. | |
| Analyzed | High (8.8) | 0.63% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/30/2026 | 7/1/2026 | Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment | |
| Analyzed | High (8.8) | 1.0% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/30/2026 | 8/27/2026 | Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server | |
| Analyzed | High (8.8) | 0.50% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/30/2026 | 7/1/2026 | Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP | |
| Analyzed | High (8.7) | 0.56% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/30/2026 | 7/2/2026 | Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler | |
| Analyzed | Medium (6.9) | 0.56% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/30/2026 | 7/2/2026 | Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler | |
| Analyzed | High (7.1) | 0.58% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/30/2026 | 7/2/2026 | Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled | |
| Awaiting Analysis | High (7.7) | 0.29% | — | Citrix Netscaler ADCAICitrix Netscaler GatewayAI | 3/23/2026 | 6/17/2026 | Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup | |
| Analyzed | Critical (9.3) | 4.0% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 3/23/2026 | 6/17/2026 | Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread | |
| Deferred | Medium (5.9) | 25% | — | Citrix Netscaler ADCAICitrix Netscaler GatewayAI | 11/11/2025 | 6/17/2026 | Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | |
| Deferred | High (8.7) | 2.8% | — | Citrix Netscaler ADCAICitrix Netscaler GatewayAI | 8/26/2025 | 6/17/2026 | Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access | |
| Analyzed | High (8.8) | 6.9% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 8/26/2025 | 6/17/2026 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it | |
| Analyzed | Critical (9.2) | 20% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 8/26/2025 | 6/17/2026 | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB… | |
| Analyzed | Critical (9.2) | 11% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/25/2025 | 6/17/2026 | Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | |
| Analyzed | Critical (9.3) | 100% | ⚠ Active exploitation | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/17/2025 | 8/4/2026 | Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | |
| Analyzed | High (8.7) | 6.2% | — | Citrix Netscaler Application Delivery ControllerCitrix Netscaler Gateway | 6/17/2025 | 6/17/2026 | Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway |