Citrix: every exploited CVE on CISA KEV
All 27 Citrix bugs attackers are confirmed to be using, with attack scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
27
Citrix bugs on CISA’s exploited list
6 added in 2026.
7
are linked to ransomware
Every Citrix vulnerability the US government has confirmed attackers are using, newest first, with each bug’s EPSS (predicted attack chance) and VEDAS (exploit evidence) scores and any free Nuclei or Suricata detection rule. US federal agencies must fix KEV-listed bugs by a deadline; everyone else should treat the list as “patch first”.
| Added | CVE | Product | Bug | EPSS | VEDAS | Detection rule | Ransomware |
|---|---|---|---|---|---|---|---|
| 2026-10-04 | CVE-2026-88779 | Citrix NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.11 | 0.54 | None yet | No |
| 2026-09-27 | CVE-2026-88772 | Citrix NetScaler | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.78 | 0.98 | Nuclei · Suricata | No |
| 2026-09-27 | CVE-2026-88771 | Citrix NetScaler | Citrix NetScaler Improper Input Validation Vulnerability | 0.82 | 0.98 | Nuclei · Suricata | No |
| 2026-09-09 | CVE-2026-19490 | Citrix NetScaler | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | 0.33 | 0.98 | Nuclei | No |
| 2026-08-26 | CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 0.01 | 0.97 | None yet | No |
| 2026-03-30 | CVE-2026-3055 | Citrix NetScaler | Citrix NetScaler Out-of-Bounds Read Vulnerability | 0.91 | 0.99 | Nuclei · Suricata | No |
| 2025-08-26 | CVE-2025-7775 | Citrix NetScaler | Citrix NetScaler Memory Overflow Vulnerability | 0.21 | 0.98 | Nuclei · Suricata | No |
| 2025-08-25 | CVE-2024-8069 | Citrix Session Recording | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | 0.21 | 0.90 | None yet | No |
| 2025-08-25 | CVE-2024-8068 | Citrix Session Recording | Citrix Session Recording Improper Privilege Management Vulnerability | 0.03 | 0.70 | None yet | No |
| 2025-07-10 | CVE-2025-5777 | Citrix NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2025-06-30 | CVE-2025-6543 | Citrix NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | 0.10 | 0.97 | None yet | No |
| 2024-01-17 | CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 0.58 | 0.98 | Nuclei · Suricata | No |
| 2024-01-17 | CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 0.03 | 0.70 | None yet | No |
| 2023-10-18 | CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2023-08-16 | CVE-2023-24489 | Citrix Content Collaboration | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 0.97 | 0.98 | Nuclei · Suricata | No |
| 2023-07-19 | CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 1.00 | 0.99 | Nuclei · Suricata | Yes |
| 2022-12-13 | CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | 0.07 | 0.98 | None yet | No |
| 2022-03-25 | CVE-2021-22941 | Citrix ShareFile | Citrix ShareFile Improper Access Control Vulnerability | 0.54 | 0.98 | Suricata | Yes |
| 2022-03-25 | CVE-2019-12991 | Citrix SD-WAN and NetScaler | Citrix SD-WAN and NetScaler Command Injection Vulnerability | 0.74 | 0.97 | None yet | No |
| 2022-03-25 | CVE-2019-12989 | Citrix SD-WAN and NetScaler | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 0.95 | 0.98 | Nuclei · Suricata | No |
| 2022-03-25 | CVE-2017-6316 | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | Citrix Multiple Products Remote Code Execution Vulnerability | 0.73 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2020-8196 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 0.26 | 0.97 | None yet | No |
| 2021-11-03 | CVE-2020-8195 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 0.33 | 0.98 | None yet | No |
| 2021-11-03 | CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 0.88 | 0.98 | Nuclei · Suricata | No |
| 2021-11-03 | CVE-2019-19781 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 1.00 | 0.98 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2019-13608 | Citrix StoreFront Server | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 0.30 | 0.98 | Nuclei · Suricata | Yes |
| 2021-11-03 | CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 0.08 | 0.53 | None yet | Yes |
Industry partners
