Known vulnerabilities in Citrix Netscaler ADC

Vendor: Citrix
Software CPE: cpe:2.3:a:citrix:citrix_netscaler_adc:*:*:*:*:*:*:*:*
Total vulnerabilities: 56
Public exploits: 10
Known exploited (KEV): 17

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Citrix Netscaler ADC Citrix Netscaler ADC is affected by 56 known vulnerabilities: 9 critical, 13 high, 26 medium, 8 low Critical High Medium Low

Vulnerabilities (56)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154043 - Memory corruption
CVE-2026-107406
CWE-119 Critical
No
No
13.1.37.283, 13.1-64.29, 14.1-73.46 09.10.2026 SB2026100948
#VU153260 - Memory corruption
CVE-2026-88779
CWE-119 Medium
No
Exploited
13.1-37.282, 13.1-64.28, 14.1-73.41 05.10.2026 SB2026100531
#VU152297 - Memory corruption
CVE-2026-88777
CWE-119 Medium
No
No
13.1-37.279, 13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152298 - Predictable Exact Value from Previous Values
CVE-2026-88778
CWE-342 Low
No
No
13.1-37.279, 13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152292 - Memory corruption
CVE-2026-88772
CWE-119 Critical
No
Exploited
13.1-37.279, 13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152293 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-88773
CWE-444 High
No
No
13.1-37.279, 13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152294 - Configuration
CVE-2026-88774
CWE-16 Medium
No
No
13.1-37.279, 13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152295 - Memory corruption
CVE-2026-88775
CWE-119 Medium
No
No
13.1-37.279, 13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152296 - Memory corruption
CVE-2026-88776
CWE-119 Medium
No
No
13.1-37.279, 13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152266 - Improper input validation
CVE-2026-88771
CWE-20 Critical
No
Exploited
13.1-37.279, 13.1-64.23, 14.1-73.37 27.09.2026 SB2026092701
#VU144333 - Memory corruption
CVE-2026-19489
CWE-119 Medium
No
No
13.1-63.21, 14.1-73.32 19.08.2026 SB2026081986
#VU144334 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-19490
CWE-288 High
No
Exploited
13.1-63.21, 14.1-73.32 19.08.2026 SB2026081986
#VU135996 - Out-of-bounds read
CVE-2026-8451
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135997 - Memory corruption
CVE-2026-8452
CWE-119 High
No
Exploited
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135998 - Memory corruption
CVE-2026-8655
CWE-119 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135999 - External Control of File Name or Path
CVE-2026-10816
CWE-73 Low
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136000 - Out-of-bounds read
CVE-2026-10817
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136001 - Missing release of memory after effective lifetime
CVE-2026-13474
CWE-401 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU124257 - Out-of-bounds read
CVE-2026-3055
CWE-125 Critical
Available
Exploited
13.1-62.23, 14.1-66.59 23.03.2026 SB2026032374
#VU124256 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-4368
CWE-362 Medium
No
No
14.1-66.54 23.03.2026 SB2026032373


Showing elements 1 - 20 out of 56