Citrix vulnerabilities23 known to be exploited.
Citrix has 438 published vulnerabilities across 266 products in our catalogue. 23 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Hypervisor, with 62. If you run Citrix software, patch the exploited flaws first.
The most recent Citrix flaw added to the known-exploited list is CVE-2025-7775, on 26 August 2025. We keep watching the known-exploited list.
Which Citrix products have the most vulnerabilities?
Hypervisor leads with 62 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Citrix vulnerabilities are being exploited?
23 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Citrix NetScaler Memory Overflow Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.
- 8.0Citrix Session Recording Deserialization of Untrusted Data Vulnerability
Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access.
- 8.0Citrix Session Recording Improper Privilege Management Vulnerability
Citrix Session Recording contains an improper privilege management vulnerability that could allow for privilege escalation to NetworkService Account access.
- 7.5Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability
Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation.
- 9.8Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service.
- 8.2Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- 5.5Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.
- 9.4Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA...
Which Citrix flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- >99%
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- >99%
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by...
- >99%
An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0.
- >99%
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown...
- >99%
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
- >99%
Unauthenticated remote code execution
- 95%
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile...
- 94%
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.
- 88%
Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 allows...
- 81%CVE-2023-24488Medium
Cross site scripting vulnerability in Citrix ADC and Citrix Gateway in allows and attacker to perform cross site scripting
All Citrix products we track.
202 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Hypervisorhypervisor62 vulnerabilities1 version
- Xenserverxenserver51 vulnerabilities20 versions
- NetScaler Gatewaynetscaler_gateway39 vulnerabilities40 versions
- Netscaler Gateway Firmwarenetscaler_gateway_firmware31 vulnerabilities35 versions
- Application Delivery Controllerapplication_delivery_controller30 vulnerabilities15 versions
- Application Delivery Controller Firmwareapplication_delivery_controller_firmware30 vulnerabilities26 versions
- Gatewaygateway30 vulnerabilities20 versions
- Netscaler Application Delivery Controller Firmwarenetscaler_application_delivery_controller_firmware29 vulnerabilities45 versions
- NetScaler ADCnetscaler_application_delivery_controller26 vulnerabilities33 versions
- Xenmobile Serverxenmobile_server22 vulnerabilities25 versions
- Netscaler SD-WANnetscaler_sd-wan18 vulnerabilities35 versions
- SD-WANsd-wan18 vulnerabilities23 versions
- Access Gatewayaccess_gateway14 vulnerabilities24 versions
- Gateway Firmwaregateway_firmware14 vulnerabilities5 versions
- Netscalernetscaler12 vulnerabilities8 versions
- Workspaceworkspace12 vulnerabilities73 versions
- Metaframemetaframe10 vulnerabilities6 versions
- SD-WAN Wanopsd-wan_wanop10 vulnerabilities21 versions
- Metaframe Presentation Servermetaframe_presentation_server9 vulnerabilities4 versions
- Xenxen9 vulnerabilities20 versions
- Xenappxenapp9 vulnerabilities16 versions
- Cloudportal Services Managercloudportal_services_manager8 vulnerabilities1 version
- Sharefile Storagezones Controllersharefile_storagezones_controller8 vulnerabilities42 versions
- Virtual Apps and Desktopsvirtual_apps_and_desktops8 vulnerabilities11 versions
This directory lists the 202 Citrix products with at least one tracked version, of 266 in our catalogue.
Running Citrix? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service.
- Matched to
- NetScaler Gateway on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 438 published vulnerabilities across 266 products and 1,209 versions from Citrix. The most recent Citrix flaw added to the known-exploited list is CVE-2025-7775, on 26 August 2025.
23 Citrix vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2025-7775, CVE-2024-8069 and CVE-2024-8068. The full list is on this page.
Hypervisor, with 62 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a EdgeProtect account and track the Citrix products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.