Known vulnerabilities in Citrix Netscaler ADC

Vendor: Citrix
Software CPE: cpe:2.3:a:citrix:citrix_netscaler_adc:*:*:*:*:*:*:*:*
Total vulnerabilities: 46
Public exploits: 10
Known exploited (KEV): 13
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Citrix Netscaler ADC Citrix Netscaler ADC is affected by 46 known vulnerabilities: 6 critical, 12 high, 21 medium, 7 low Critical High Medium Low

Vulnerabilities (46)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144333 - Memory corruption
CVE-2026-19489
CWE-119 Medium
No
No
13.1-63.21, 14.1-73.32 19.08.2026 SB2026081986
#VU144334 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-19490
CWE-288 High
No
No
13.1-63.21, 14.1-73.32 19.08.2026 SB2026081986
#VU135996 - Out-of-bounds read
CVE-2026-8451
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135997 - Memory corruption
CVE-2026-8452
CWE-119 High
No
Exploited
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135998 - Memory corruption
CVE-2026-8655
CWE-119 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135999 - External Control of File Name or Path
CVE-2026-10816
CWE-73 Low
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136000 - Out-of-bounds read
CVE-2026-10817
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136001 - Missing release of memory after effective lifetime
CVE-2026-13474
CWE-401 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU124257 - Out-of-bounds read
CVE-2026-3055
CWE-125 Critical
Available
Exploited
13.1-62.23, 14.1-66.59 23.03.2026 SB2026032374
#VU124256 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-4368
CWE-362 Medium
No
No
14.1-66.54 23.03.2026 SB2026032373
#VU118307 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12101
CWE-79 Medium
Available
No
12.1-55.333, 13.1-37.250, 13.1-60.32, 14.1-56.73 11.11.2025 SB2025111173
#VU114449 - Improper Access Control
CVE-2025-8424
CWE-284 Medium
No
No
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU114448 - Memory corruption
CVE-2025-7776
CWE-119 High
No
No
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU114447 - Memory corruption
CVE-2025-7775
CWE-119 Critical
Available
Exploited
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU111952 - Memory corruption
CVE-2025-6543
CWE-119 High
No
Exploited
13.1-59.19, 14.1-47.46 26.06.2025 SB2025062606
#VU111237 - Out-of-bounds read
CVE-2025-5777
CWE-125 High
Available
Exploited
12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 17.06.2025 SB2025061749
#VU111236 - Improper Access Control
CVE-2025-5349
CWE-284 High
No
No
12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 17.06.2025 SB2025061749
#VU100415 - Improper Access Control
CVE-2024-8535
CWE-284 Medium
No
No
12.1-55.321, 13.1-37.207, 13.1-55.34, 14.1-29.72 13.11.2024 SB2024111301
#VU100414 - Memory corruption
CVE-2024-8534
CWE-119 Medium
No
No
12.1-55.321, 13.1-37.207, 13.1-55.34, 14.1-29.72 13.11.2024 SB2024111301
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
12.1-55.309, 13.0-92.31, 13.1-37.190, 13.1-53.24, 14.1-25.56 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more


Showing elements 1 - 20 out of 46