Citrix: known exploited vulnerabilities
Entries27No. 11
Ransomware-linked7
Products12
Latest2026-10-04
Added per year
By product
6
5
4
2
2
2
1
1
1
1
1
1
Entries
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-88779 | Citrix NetScaler | 2026-10-04 | 0.5% | Unknown |
| CVE-2026-88772 | Citrix NetScaler | 2026-09-27 | 1.3% | Unknown |
| CVE-2026-88771 | Citrix NetScaler | 2026-09-27 | 1.0% | Unknown |
| CVE-2026-19490 | Citrix NetScaler | 2026-09-09 | 23.1% | Unknown |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 2026-08-26 | 1.0% | Unknown |
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | 4.0% | Unknown |
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | 20.2% | Unknown |
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | 14.6% | Unknown |
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | 3.4% | Unknown |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | 99.9% | Known |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | 10.5% | Unknown |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 57.6% | Unknown |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | 3.1% | Unknown |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 2023-10-18 | 99.9% | Known |
| CVE-2023-24489 | Citrix Content Collaboration | 2023-08-16 | 97.3% | Unknown |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | 2023-07-19 | 99.7% | Known |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | 2022-12-13 | 6.6% | Unknown |
| CVE-2021-22941 | Citrix ShareFile | 2022-03-25 | 53.5% | Known |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler | 2022-03-25 | 74.0% | Unknown |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | 2022-03-25 | 94.9% | Unknown |
| CVE-2017-6316 | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 2022-03-25 | 73.0% | Unknown |
| CVE-2020-8196 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 26.3% | Unknown |
| CVE-2020-8195 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 33.0% | Unknown |
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 88.4% | Unknown |
| CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | 99.9% | Known |
| CVE-2019-13608 | Citrix StoreFront Server | 2021-11-03 | 30.0% | Known |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows | 2021-11-03 | 8.0% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
CISA KEV lists 27 Citrix vulnerabilities (No. 11 of 288 vendors).