Netscaler Application Delivery Controller vulnerabilities

28 known vulnerabilities in Netscaler Application Delivery Controller from Citrix. 28 are rated high or critical, and 13 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Exploited

  CVE-2026-88779Oct 4, 2026NetScalerEPSS 11.4%

  Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.

• 7.5 High severity

  ADC: Predictable Exact Value from Previous Values

  CVE-2026-88778Sep 27, 2026Citrix NetScaler

  Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-7

• 9.8 Critical severity

  ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-88777Sep 27, 2026Citrix NetScaler

  Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before

• 9.8 Critical severity

  ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-88776Sep 27, 2026Citrix NetScaler

  Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before

• 9.8 Critical severity

  ADC: Buffer Copy without Checking Size of Input

  CVE-2026-88775Sep 27, 2026Citrix NetScaler

  Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 le

• 7.2 High severity

  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway.

  CVE-2026-88774Sep 27, 2026Citrix NetScaler

  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a featu

• 10.0 Critical severity

  ADC: Inconsistent Interpretation of HTTP Requests

  CVE-2026-88773Sep 27, 2026Citrix NetScalerEPSS 3.08%

  Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 an

• 8.1 High severity

  Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Exploited

  CVE-2026-88772Sep 27, 2026Citrix NetScalerEPSS 76.6%

  Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote

• 9.8 Critical severity

  Citrix NetScaler Improper Input Validation Exploited

  CVE-2026-88771Sep 27, 2026Citrix NetScalerEPSS 81.9%

  Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.

• 9.8 Critical severity

  Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Exploited

  CVE-2026-19490Aug 19, 2026NetScalerEPSS 33.3%

  Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

• 9.8 Critical severity

  ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2026-8655Jun 30, 2026NetScaler

  Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScal

• 9.8 Critical severity

  Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Exploited

  CVE-2026-8452Jun 30, 2026NetScalerEPSS 1.01%

  Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

• 7.5 High severity

  ADC: Out-of-bounds Read

  CVE-2026-8451Jun 30, 2026NetScalerEPSS 14.2%

  Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

• 7.5 High severity

  ADC: Missing Release of Memory after Effective Lifetime

  CVE-2026-13474Jun 30, 2026NetScaler

  Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

• 7.5 High severity

  ADC: Out-of-bounds Read

  CVE-2026-10817Jun 30, 2026NetScaler

  Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

• 7.5 High severity

  ADC: Externally Controlled Reference to a Resource in Another Sphere

  CVE-2026-10816Jun 30, 2026NetScaler

  Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

• 9.8 Critical severity

  Citrix NetScaler Out-of-Bounds Read Exploited

  CVE-2026-3055Mar 23, 2026NetScalerEPSS 91.5%

  Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

• 9.8 Critical severity

  ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2025-7776Aug 26, 2025NetScalerEPSS 9.14%

  Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bounded to i

• 9.8 Critical severity

  Citrix NetScaler Memory Overflow Exploited

  CVE-2025-7775Aug 26, 2025NetScalerEPSS 20.7%

  Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and

• 9.8 Critical severity

  Citrix NetScaler ADC and Gateway Buffer Overflow Exploited

  CVE-2025-6543Jun 25, 2025NetScalerEPSS 10.4%

  Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

• 7.5 High severity

  Citrix NetScaler ADC and Gateway Out-of-Bounds Read Exploited

  CVE-2025-5777Jun 17, 2025NetScalerEPSS 99.9%

  Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

• 8.1 High severity

  NetScaler ADC: Files or Directories Accessible to External Parties

  CVE-2024-8535Nov 12, 2024NetScaler

  Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources

• 8.1 High severity

  NetScaler ADC: Out-of-bounds Write

  CVE-2024-8534Nov 12, 2024NetSclaer

  Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) a

• 7.5 High severity

  Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Exploited

  CVE-2023-6549Jan 17, 2024Cloud Software GroupEPSS 57.6%

  Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read

• 8.8 High severity

  Citrix NetScaler ADC and NetScaler Gateway Code Injection Exploited

  CVE-2023-6548Jan 17, 2024Cloud Software GroupEPSS 3.19%

  Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interf

• 7.5 High severity

  NetScaler ADC: Improper Restriction of Operations within the Bounds of a Memory Buffer

  CVE-2023-4967Oct 27, 2023Cloud Software GroupEPSS 1.03%

  Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server

• 7.5 High severity

  Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Exploited

  CVE-2023-4966Oct 10, 2023CitrixEPSS 100%

  Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.

• 9.8 Critical severity

  Citrix NetScaler ADC and NetScaler Gateway Code Injection Exploited

  CVE-2023-3519Jul 19, 2023CitrixEPSS 99.7%

  Unauthenticated remote code execution