Citrix
27 Citrix flaws are on CISA's list of vulnerabilities attackers have used, 6 of them added in 2026. CISA says 7 are known to be used by ransomware. The latest was added Oct 4, 2026.
27on CISA's list, all time
6added in 2026
5in the last 90 days
7used by ransomware
10zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| NetScaler | 6 | Oct 4, 2026 |
| NetScaler ADC and NetScaler Gateway | 5 | Aug 26, 2026 |
| Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 4 | Nov 3, 2021 |
| Session Recording | 2 | Aug 25, 2025 |
| NetScaler ADC and Gateway | 2 | Jul 10, 2025 |
| SD-WAN and NetScaler | 2 | Mar 25, 2022 |
| Content Collaboration | 1 | Aug 16, 2023 |
| Application Delivery Controller (ADC) and Gateway | 1 | Dec 13, 2022 |
| NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 1 | Mar 25, 2022 |
| ShareFile | 1 | Mar 25, 2022 |
Latest Citrix flaws
- NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- NetScalerCitrix NetScaler Improper Input Validation Vulnerability
- NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- NetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- NetScalerCitrix NetScaler Out-of-Bounds Read Vulnerability
- NetScalerCitrix NetScaler Memory Overflow Vulnerability
- Session RecordingCitrix Session Recording Improper Privilege Management Vulnerability
- Session RecordingCitrix Session Recording Deserialization of Untrusted Data Vulnerability
- NetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
- NetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
- NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
- NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
- NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
- Content CollaborationCitrix Content Collaboration ShareFile Improper Access Control Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.