CVE-20XX-?

Citrix Netscaler Application Delivery Controller CVEs.

Published CVEs affecting Citrix Netscaler Application Delivery Controller, ranked by exploit odds.

22 CVEs · updated 2026-11-06 01:47 UTC

  1. CVE-2025-5777

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    Drop everything exploited Memory safety Network gear Citrix Netscaler Application Delivery Controller

    9.3 CRITICAL 100% exploit odds Fix listed
  2. CVE-2026-3055

    Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

    Drop everything exploited Memory safety Network gear Citrix Netscaler Application Delivery Controller

    9.3 CRITICAL 91% exploit odds Fix listed
  3. CVE-2026-88771

    Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands.

    Drop everything exploited Code execution Network gear Citrix Netscaler Application Delivery Controller

    9.5 CRITICAL 82% exploit odds Fix listed
  4. CVE-2026-88772

    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

    Drop everything exploited Memory safety Citrix Netscaler Application Delivery Controller

    9.5 CRITICAL 77% exploit odds Fix listed
  5. CVE-2026-19490

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

    Drop everything exploited Other Network gear Citrix Netscaler Application Delivery Controller

    9.3 CRITICAL 33% exploit odds Fix listed
  6. CVE-2025-7775

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX

    Drop everything exploited Memory safety Network gear Citrix Netscaler Application Delivery Controller

    9.2 CRITICAL 21% exploit odds Fix listed
  7. CVE-2026-88779

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

    exploited Memory safety Network gear Citrix Netscaler Application Delivery Controller

    8.7 HIGH 11% exploit odds Fix listed
  8. CVE-2025-6543

    Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    Drop everything exploited Memory safety Network gear Citrix Netscaler Application Delivery Controller

    9.2 CRITICAL 10% exploit odds Fix listed
  9. CVE-2025-7776

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to it

    Citrix Netscaler Application Delivery Controller

    8.8 HIGH 9% exploit odds Fix listed
  10. CVE-2025-5349

    Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

    Citrix Netscaler Application Delivery Controller

    8.7 HIGH 7% exploit odds Fix listed
  11. CVE-2026-88773

    Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23.

    Other Citrix Netscaler Application Delivery Controller

    9.3 CRITICAL 3% exploit odds Fix listed
  12. CVE-2026-8452

    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

    exploited Memory safety Network gear Citrix Netscaler Application Delivery Controller

    8.8 HIGH 1% exploit odds Fix listed
  13. CVE-2026-88776

    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23  leading to unpredictable or erroneous behavior or Denial of Service

    Memory safety Citrix Netscaler Application Delivery Controller

    8.8 HIGH 0.7% exploit odds Fix listed
  14. CVE-2026-88775

    Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

    Memory safety Citrix Netscaler Application Delivery Controller

    8.8 HIGH 0.7% exploit odds Fix listed
  15. CVE-2026-88777

    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23  leading to unpredictable or erroneous behavior or Denial of Service

    Memory safety Citrix Netscaler Application Delivery Controller

    8.8 HIGH 0.7% exploit odds Fix listed
  16. CVE-2026-88778

    Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23.

    Other Citrix Netscaler Application Delivery Controller

    8.8 HIGH 0.7% exploit odds Fix listed
  17. CVE-2026-8655

    Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment

    Memory safety Citrix Netscaler Application Delivery Controller

    8.8 HIGH 0.6% exploit odds Fix listed
  18. CVE-2026-10816

    Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

    Disclosure Network gear Citrix Netscaler Application Delivery Controller

    7.1 HIGH 0.6% exploit odds Fix listed
  19. CVE-2026-10817

    Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

    Memory safety Network gear Citrix Netscaler Application Delivery Controller

    6.9 MEDIUM 0.6% exploit odds Fix listed
  20. CVE-2026-13474

    Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

    Denial of service Network gear Citrix Netscaler Application Delivery Controller

    8.7 HIGH 0.6% exploit odds Fix listed
  21. CVE-2026-8451

    Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

    Memory safety Network gear Citrix Netscaler Application Delivery Controller

    8.8 HIGH 0.5% exploit odds Fix listed
  22. CVE-2026-88774

    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a feature policy bypass due to improper HTTP URL based expression usage.

    Other Citrix Netscaler Application Delivery Controller

    7.0 HIGH 0.4% exploit odds Fix listed

All CVEs affecting Citrix Netscaler Application Delivery Controller that appear in CVE.org and NVD, sorted by how likely they are to be exploited (EPSS), with fix status and timeline.