Citrix - vulnerabilities (CVEs)
412 CVEs in 295 products, 5 in the last 30 days, newest from 2026-10-13.
Products
- Xenserver - 50 CVEs
- Netscaler Gateway - 41 CVEs
- Netscaler Application Delivery Controller - 34 CVEs
- Netscaler Gateway Firmware - 31 CVEs
- Application Delivery Controller Firmware - 30 CVEs
- Netscaler Application Delivery Controller Firmware - 28 CVEs
- Xenmobile Server - 21 CVEs
- Gateway - 19 CVEs
- Sd-wan - 18 CVEs
- Netscaler Sd-wan - 16 CVEs
- Gateway Firmware - 14 CVEs
- Workspace - 14 CVEs
- Access Gateway - 13 CVEs
- Metaframe - 10 CVEs
- Netscaler - 10 CVEs
- Sd-wan Wanop - 10 CVEs
- Metaframe Presentation Server - 9 CVEs
- Virtual Apps And Desktops - 9 CVEs
- Xen - 9 CVEs
- Xenapp - 9 CVEs
- Cloudportal Services Manager - 8 CVEs
- Sharefile Storagezones Controller - 8 CVEs
- Xendesktop - 8 CVEs
- Netscaler Access Gateway - 7 CVEs
- Netscaler Access Gateway Firmware - 7 CVEs
- Presentation Server - 7 CVEs
- Access Essentials - 6 CVEs
- Citrix Workspace App For Windows - 6 CVEs
- Nfuse - 6 CVEs
- Provisioning Services - 6 CVEs
- Secure Access Client - 6 CVEs
- Application Delivery Management - 5 CVEs
- Application Delivery Controller - 4 CVEs
- Citrix Adc - 4 CVEs
- Citrix Gateway - 4 CVEs
- Cloudplatform - 4 CVEs
- Desktop Server - 4 CVEs
- Netscaler Adc - 4 CVEs
- Netscaler Console - 4 CVEs
- Netscaler Sdx Firmware - 4 CVEs
- Web Interface - 4 CVEs
- Workspace App - 4 CVEs
- Xencenterweb - 4 CVEs
- Citrix Sd-wan Center - 3 CVEs
- Command Center - 3 CVEs
- Gateway Plug-in - 3 CVEs
- Netscaler Sd-wan Center - 3 CVEs
- Netscaler Service Delivery Appliance Service Vm - 3 CVEs
- Presentation Server Client - 3 CVEs
- Sd-wan 1000 Firmware - 3 CVEs
- Sd-wan 1100 Firmware - 3 CVEs
- Sd-wan 110 Firmware - 3 CVEs
- Sd-wan 2000 Firmware - 3 CVEs
- Sd-wan 2100 Firmware - 3 CVEs
- Sd-wan 210 Firmware - 3 CVEs
- Sd-wan 4000 Firmware - 3 CVEs
- Sd-wan 400 Firmware - 3 CVEs
- Sd-wan 4100 Firmware - 3 CVEs
- Sd-wan 410 Firmware - 3 CVEs
- Sd-wan 5100 Firmware - 3 CVEs
- Sd-wan 6100 Firmware - 3 CVEs
- Storefront Server - 3 CVEs
- Uniconos - 3 CVEs
- Access Gateway Plug-in - 2 CVEs
- Citrix Adc And Citrix Gateway - 2 CVEs
- Citrix Application Delivery Management Citrix Adm - 2 CVEs
- Citrix Secure Access Client For Windows - 2 CVEs
- Citrix Workspace App For Html5 - 2 CVEs
- Gateway Plug-in For Linux - 2 CVEs
- Linux Virtual Delivery Agent - 2 CVEs
- Metaframe Client - 2 CVEs
- Metaframe Password Manager - 2 CVEs
- Netscaler Agent - 2 CVEs
- Netscaler Firmware - 2 CVEs
- Netscaler Sd-wan Firmware - 2 CVEs
- Netscaler Sdx - 2 CVEs
- Online Plug-in For Windows For Xenapp & Xendesktop - 2 CVEs
- Program Neighborhood Agent - 2 CVEs
- Provisioning - 2 CVEs
- Receiver - 2 CVEs
- Secure Access Client For Mac - 2 CVEs
- Secure Access Client For Windows - 2 CVEs
- Secure Mail - 2 CVEs
- Session Recording - 2 CVEs
- Sharefile - 2 CVEs
- Vdi-in-a-box - 2 CVEs
- Workspace App For Windows - 2 CVEs
- Appdna - 1 CVEs
- Broadcast Server - 1 CVEs
- Citrix Endpoint Analysis Client For Windows - 1 CVEs
- Citrix Hypervisor - 1 CVEs
- Citrix Presentation Server - 1 CVEs
- Citrix Provisioning - 1 CVEs
- Citrix Sd-wan Standardpremium Editions - 1 CVEs
- Citrix Sd Wan Premium Edition - 1 CVEs
- Citrix Sd Wan Standard Edition - 1 CVEs
- Citrix Secure Access Client For Ubuntu - 1 CVEs
- Citrix Session Recording - 1 CVEs
- Citrix Sharefile Storage Zones Controller - 1 CVEs
- Citrix Virtual Apps And Desktops - 1 CVEs
- Citrix Workspace App For Linux - 1 CVEs
- Cloud Connector - 1 CVEs
- Cloudstack - 1 CVEs
- Deterministic Network Enhancer - 1 CVEs
- Edgesight For Endpoints - 1 CVEs
- Edgesight For Netscaler - 1 CVEs
- Edgesight For Presentation Server - 1 CVEs
- Endpoint Analysis Client - 1 CVEs
- Federated Authentication Service - 1 CVEs
- Federated Authentication Service Fas - 1 CVEs
- Gotomeeting - 1 CVEs
- Hypervisor - 1 CVEs
- Ica Client - 1 CVEs
- Ica Client For Linux - 1 CVEs
- Ica Client For Solaris - 1 CVEs
- Ica Program Neighborhood Client - 1 CVEs
- Ios Receiver - 1 CVEs
- License Server - 1 CVEs
- License Server Vpx - 1 CVEs
- Licensing - 1 CVEs
- Licensing Administration Console - 1 CVEs
- Metaframe Secure Access Manager - 1 CVEs
- Netscaler Gateway 11.0 Firmware - 1 CVEs
- Online Plug-in For Mac - 1 CVEs
- Online Plug-in For Mac For Xenapp & Xendesktop - 1 CVEs
- Online Plug-in For Windows - 1 CVEs
- Program Neighborhood Client - 1 CVEs
- Receiver Desktop - 1 CVEs
- Receiver For Iphone - 1 CVEs
- Receiver For Windows Mobile - 1 CVEs
- Sd-wan Center Management Console - 1 CVEs
- Sd-wan Orchestrator - 1 CVEs
- Secure Gateway - 1 CVEs
- Sharefile Mobile - 1 CVEs
- Sharefile Mobile For Tablets - 1 CVEs
- Sharefile Storage Zones Controller - 1 CVEs
- Storefront - 1 CVEs
- Uberagent - 1 CVEs
- Virtual Delivery Agents For Linux For Cvad And Citrix Daas Security - 1 CVEs
- Virtual Delivery Agents For Windows For Cvad And Citrix Daas Security - 1 CVEs
- Windows Virtual Delivery Agent - 1 CVEs
- Windows Virtual Delivery Agent For Cvad And Citrix Daas - 1 CVEs
- Winframe - 1 CVEs
- Worx Home - 1 CVEs
- Xenapp Online - 1 CVEs
- Xenclient Xt - 1 CVEs
- Xenmobile - 1 CVEs
- Xenmobile Device Manager - 1 CVEs
- Xenmobile Device Manager Mdm - 1 CVEs
- Xenmobile Mdx Toolkit - 1 CVEs
- Xp - 1 CVEs
- 4000-wo - 0 CVEs
- 4100-wo - 0 CVEs
- 5000-wo - 0 CVEs
- 5100-wo - 0 CVEs
- Access Client For Metaframe - 0 CVEs
- Access Management Console - 0 CVEs
- Access Management Console Diagnostics - 0 CVEs
- Access Management Console Framework - 0 CVEs
- Access Management Console Knowledge Base - 0 CVEs
- Access Management Console Legacy Tools - 0 CVEs
- Access Management Console Report Center - 0 CVEs
- Access Management Console Web Interface - 0 CVEs
- App Delivery Setup Tools - 0 CVEs
- Application Gateway - 0 CVEs
- Application Gateway For Avaya - 0 CVEs
- Application Gateway For Cisco - 0 CVEs
- Application Gateway For Nortel - 0 CVEs
- Common Commands - 0 CVEs
- Delivery Client - 0 CVEs
- Delivery Services Console Diagnostics - 0 CVEs
- Delivery Services Console Framework - 0 CVEs
- Delivery Services Console Knowledge Base - 0 CVEs
- Delivery Services Console Legacy Tools - 0 CVEs
- Delivery Services Console Report Center - 0 CVEs
- Edgesight - 0 CVEs
- Edgesight For Xenapp Agent - 0 CVEs
- Enhanced Desktop Experience - 0 CVEs
- Gotoassist - 0 CVEs
- Gotoassist Corporate - 0 CVEs
- Group Policy Client-side Extension - 0 CVEs
- Group Policy Management - 0 CVEs
- Hdx Mediastream For Flash Server - 0 CVEs
- Hdx Wmi Provider - 0 CVEs
- Hmr Test Pack - 0 CVEs
- Ica Web Client - 0 CVEs
- License Configuration Tool - 0 CVEs
- License Server Administration - 0 CVEs
- Management Console For Citrix Presentation Server - 0 CVEs
- Management Console For Metaframe Presentation Server - 0 CVEs
- Metaframe Access Suite Licensing - 0 CVEs
- Metaframe Conferencing Manager - 0 CVEs
- Metaframe Presentation Server Administration Snap-in - 0 CVEs
- Metaframe Presentation Server Client - 0 CVEs
- Metaframe Presentation Server For Windows - 0 CVEs
- Mpx/sdx 14030 Fips - 0 CVEs
- Mpx/sdx 14060 Fips - 0 CVEs
- Mpx/sdx 14080 Fips - 0 CVEs
- Mpx 15030-50g Fips - 0 CVEs
- Mpx 15040-50g Fips - 0 CVEs
- Mpx 15060-50g Fips - 0 CVEs
- Mpx 15080-50g Fips - 0 CVEs
- Mpx 15100-50g Fips - 0 CVEs
- Mpx 15120-50g Fips - 0 CVEs
- Mpx 8905 Fips - 0 CVEs
- Mpx 8910 Fips - 0 CVEs
- Mpx 8920 Fips - 0 CVEs
- Netscaler Gateway 11.0 - 0 CVEs
- Offline Plug-in - 0 CVEs
- Online Plug-in - 0 CVEs
- Password Manager Console - 0 CVEs
- Password Manager Plugin - 0 CVEs
- Presentation Server Administration Snap-in - 0 CVEs
- Presentation Server Document Center - 0 CVEs
- Presentation Server For Windows - 0 CVEs
- Presentation Server Presentation Server Reports - 0 CVEs
- Receiver Aero - 0 CVEs
- Receiver Dv - 0 CVEs
- Receiver Enterprise - 0 CVEs
- Receiver Hdx Flash Redirection - 0 CVEs
- Receiver Inside - 0 CVEs
- Receiver Pna - 0 CVEs
- Receiver Sson - 0 CVEs
- Receiver Usb - 0 CVEs
- Sd-wan 1000 - 0 CVEs
- Sd-wan 1000 Premium Edition - 0 CVEs
- Sd-wan 1000 Premium Edition Firmware - 0 CVEs
- Sd-wan 1000 Standard Edition - 0 CVEs
- Sd-wan 1000 Standard Edition Firmware - 0 CVEs
- Sd-wan 110 - 0 CVEs
- Sd-wan 1100 - 0 CVEs
- Sd-wan 1100 Premium Edition - 0 CVEs
- Sd-wan 1100 Premium Edition Firmware - 0 CVEs
- Sd-wan 1100 Standard Edition - 0 CVEs
- Sd-wan 1100 Standard Edition Firmware - 0 CVEs
- Sd-wan 110 Standard Edition - 0 CVEs
- Sd-wan 110 Standard Edition Firmware - 0 CVEs
- Sd-wan 2000 - 0 CVEs
- Sd-wan 2000 Premium Edition - 0 CVEs
- Sd-wan 2000 Premium Edition Firmware - 0 CVEs
- Sd-wan 2000 Standard Edition - 0 CVEs
- Sd-wan 2000 Standard Edition Firmware - 0 CVEs
- Sd-wan 210 - 0 CVEs
- Sd-wan 2100 - 0 CVEs
- Sd-wan 2100 Premium Edition - 0 CVEs
- Sd-wan 2100 Premium Edition Firmware - 0 CVEs
- Sd-wan 2100 Standard Edition - 0 CVEs
- Sd-wan 2100 Standard Edition Firmware - 0 CVEs
- Sd-wan 210 Standard Edition - 0 CVEs
- Sd-wan 210 Standard Edition Firmware - 0 CVEs
- Sd-wan 400 - 0 CVEs
- Sd-wan 4000 - 0 CVEs
- Sd-wan 4000 Standard Edition - 0 CVEs
- Sd-wan 4000 Standard Edition Firmware - 0 CVEs
- Sd-wan 400 Standard Edition - 0 CVEs
- Sd-wan 400 Standard Edition Firmware - 0 CVEs
- Sd-wan 410 - 0 CVEs
- Sd-wan 4100 - 0 CVEs
- Sd-wan 4100 Standard Edition - 0 CVEs
- Sd-wan 4100 Standard Edition Firmware - 0 CVEs
- Sd-wan 410 Standard Edition - 0 CVEs
- Sd-wan 410 Standard Edition Firmware - 0 CVEs
- Sd-wan 5100 - 0 CVEs
- Sd-wan 5100 Premium Edition - 0 CVEs
- Sd-wan 5100 Premium Edition Firmware - 0 CVEs
- Sd-wan 5100 Standard Edition - 0 CVEs
- Sd-wan 5100 Standard Edition Firmware - 0 CVEs
- Sd-wan 6100 - 0 CVEs
- Sd-wan 6100 Premium Edition - 0 CVEs
- Sd-wan 6100 Premium Edition Firmware - 0 CVEs
- Sd-wan 6100 Standard Edition - 0 CVEs
- Sd-wan 6100 Standard Edition Firmware - 0 CVEs
- Secure Gateway For Metaframe Secure Ticket Authority - 0 CVEs
- Secure Hub - 0 CVEs
- Single Sign-on Console - 0 CVEs
- Storage Zones Controller - 0 CVEs
- Web Interface For Metaframe Presentation Server - 0 CVEs
- Xenapp Administration - 0 CVEs
- Xenapp Advanced Configuration - 0 CVEs
- Xenapp Commands - 0 CVEs
- Xenapp Commands Ctp3 - 0 CVEs
- Xenapp Document Library - 0 CVEs
- Xenapp Feature Pack Enabler - 0 CVEs
- Xenapp Group Policy Management Experience - 0 CVEs
- Xenapp Management - 0 CVEs
- Xenapp Migration - 0 CVEs
- Xenapp Plugin For Hosted Apps - 0 CVEs
- Xenapp Plugin For Streamed Apps - 0 CVEs
- Xenapp Power And Capacity Management Agent - 0 CVEs
- Xenapp Reports - 0 CVEs
- Xenapp Server Configuration Tool - 0 CVEs
- Xenapp Server Role Manager - 0 CVEs
- Xenapp Server Sdk - 0 CVEs
- Xenapp Web Plugin - 0 CVEs
- Xenappprep - 0 CVEs
Newest CVEs of Citrix
- CVE-2026-53564 - CVSS 5.1 (medium), 2026-10-13: Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
- CVE-2026-53563 - CVSS 6.9 (medium), 2026-10-13: Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
- CVE-2026-84419 - CVSS 6.8 (medium), 2026-10-13: Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607…
- CVE-2026-53562 - CVSS 8.5 (high), 2026-10-13: Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603…
- CVE-2026-88779 - CVSS 8.7 (high), 2026-10-04: Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before…
- CVE-2026-88778 - CVSS 8.8 (high), 2026-09-27: Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37,…
- CVE-2026-88777 - CVSS 9.8 (critical), 2026-09-27: Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before…
- CVE-2026-88776 - CVSS 9.8 (critical), 2026-09-27: Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before…
- CVE-2026-88775 - CVSS 9.8 (critical), 2026-09-27: Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before…
- CVE-2026-88773 - CVSS 10 (critical), 2026-09-27: Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This…
- CVE-2026-88774 - CVSS 7.2 (high), 2026-09-27: Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and…
- CVE-2026-88772 - CVSS 9.5 (critical), 2026-09-27: Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and…
- CVE-2026-88771 - CVSS 9.8 (critical), 2026-09-27: Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23,…
- CVE-2026-78547 - CVSS 4.4 (medium), 2026-09-11: Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current…
- CVE-2026-19490 - CVSS 9.8 (critical), 2026-08-19: Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through…
- CVE-2026-18751 - CVSS 5.2 (medium), 2026-08-18: External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.
- CVE-2026-53566 - CVSS 6.8 (medium), 2026-07-14: Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before…
- CVE-2026-53565 - CVSS 8.5 (high), 2026-07-14: Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. This issue affects…
- CVE-2026-13474 - CVSS 8.7 (high), 2026-06-30: Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual…
- CVE-2026-10817 - CVSS 7.5 (high), 2026-06-30: Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is…
- CVE-2026-10816 - CVSS 7.5 (high), 2026-06-30: Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is…
- CVE-2026-8655 - CVSS 9.8 (critical), 2026-06-30: Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service…
- CVE-2026-8452 - CVSS 9.8 (critical), 2026-06-30: Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is…
- CVE-2026-8451 - CVSS 8.8 (high), 2026-06-30: Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML…
- CVE-2025-15612 - CVSS 8.1 (high), 2026-03-27: Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS…
- CVE-2026-3055 - CVSS 9.8 (critical), 2026-03-23: Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
- CVE-2025-7776 - CVSS 9.8 (critical), 2025-08-26: Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is…
- CVE-2025-7775 - CVSS 9.8 (critical), 2025-08-26: Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as…
- CVE-2025-6759 - CVSS 7.8 (high), 2025-07-08: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS
- CVE-2025-6543 - CVSS 9.8 (critical), 2025-06-25: Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN…
