Product by Citrix Systems
Netscaler Adc
18 known vulnerabilities in Netscaler Adc (Citrix Systems), 5 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
5
Actively exploited (KEV)
0
Used by ransomware
11
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-19490 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 In CISA KEValso in 5 other products | 9.8 | |
| Critical | CVE-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability In CISA KEValso in 7 other products | 9.8 | |
| Critical | CVE-2026-88772 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service In CISA KEValso in 7 other products | 8.1 | |
| Critical | CVE-2026-8452 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service In CISA KEValso in 6 other products | 9.8 | |
| Critical | CVE-2026-88779 | Memory overflow vulnerability leading to Denial of Service In CISA KEValso in 7 other products | 7.5 | |
| High | CVE-2026-19489 | NetScaler ADC: security vulnerability | — | |
| Critical | CVE-2026-88773 | HTTP Request Smuggling | 10.0 | |
| Critical | CVE-2026-107406 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service | — | |
| Critical | CVE-2026-8655 | NetScaler ADC: Denial of Service | 9.8 | |
| Critical | CVE-2026-88777 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | 9.8 | |
| Critical | CVE-2026-88776 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | 9.8 | |
| Critical | CVE-2026-88775 | Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service | 9.8 | |
| High | CVE-2026-88778 | TCP Initial Sequence Number (ISN) prediction | 7.5 | |
| High | CVE-2026-13474 | Denial of service via malformed HTTP/2 requests | 7.5 | |
| High | CVE-2026-8451 | Insufficient input validation leading to memory overread | 7.5 | |
| High | CVE-2026-10816 | Arbitrary File Read (Unauthenticated) | 7.5 | |
| High | CVE-2026-10817 | Insufficient input validation leading to memory overread | 7.5 | |
| High | CVE-2026-88774 | Feature policy bypass due to improper HTTP URL based expression usage | 7.2 |
News
- Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gatewaycsoonline,
- Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deploymentsthehackernews,
- Citrix Urges Immediate Patching of Critical NetScaler Vulnerabilitysecurityweek,
- Citrix NetScaler security snafus get even worse amid more 0-day reportstheregister-security,
- Citrix warns of actively exploited NetScaler flaw days after zero-day patch rushcsoonline,
- New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offlinethehackernews,