Known vulnerabilities in Citrix Netscaler ADC

Vendor: Citrix
Software CPE: cpe:2.3:a:citrix:citrix_netscaler_adc:*:*:*:*:*:*:*:*
Total vulnerabilities: 44
Public exploits: 10
Known exploited (KEV): 12
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Citrix Netscaler ADC Citrix Netscaler ADC is affected by 44 known vulnerabilities: 6 critical, 11 high, 20 medium, 7 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135996 - Out-of-bounds read
CVE-2026-8451
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135997 - Memory corruption
CVE-2026-8452
CWE-119 High
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135998 - Memory corruption
CVE-2026-8655
CWE-119 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135999 - External Control of File Name or Path
CVE-2026-10816
CWE-73 Low
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136000 - Out-of-bounds read
CVE-2026-10817
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136001 - Missing release of memory after effective lifetime
CVE-2026-13474
CWE-401 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU124257 - Out-of-bounds read
CVE-2026-3055
CWE-125 Critical
Available
Exploited
13.1-62.23, 14.1-66.59 23.03.2026 SB2026032374
#VU124256 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-4368
CWE-362 Medium
No
No
14.1-66.54 23.03.2026 SB2026032373
#VU118307 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12101
CWE-79 Medium
Available
No
12.1-55.333, 13.1-37.250, 13.1-60.32, 14.1-56.73 11.11.2025 SB2025111173
#VU114449 - Improper Access Control
CVE-2025-8424
CWE-284 Medium
No
No
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU114448 - Memory corruption
CVE-2025-7776
CWE-119 High
No
No
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU114447 - Memory corruption
CVE-2025-7775
CWE-119 Critical
Available
Exploited
12.1-55.330, 13.1-37.241, 13.1-59.22, 14.1-47.48 27.08.2025 SB2025082719
#VU111952 - Memory corruption
CVE-2025-6543
CWE-119 High
No
Exploited
13.1-59.19, 14.1-47.46 26.06.2025 SB2025062606
#VU111237 - Out-of-bounds read
CVE-2025-5777
CWE-125 High
Available
Exploited
12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 17.06.2025 SB2025061749
#VU111236 - Improper Access Control
CVE-2025-5349
CWE-284 High
No
No
12.1-55.328, 13.1-37.235, 13.1-58.32, 14.1-43.56 17.06.2025 SB2025061749
#VU100415 - Improper Access Control
CVE-2024-8535
CWE-284 Medium
No
No
12.1-55.321, 13.1-37.207, 13.1-55.34, 14.1-29.72 13.11.2024 SB2024111301
#VU100414 - Memory corruption
CVE-2024-8534
CWE-119 Medium
No
No
12.1-55.321, 13.1-37.207, 13.1-55.34, 14.1-29.72 13.11.2024 SB2024111301
#VU94075 - Memory corruption
CVE-2024-5491
CWE-119 Low
No
No
12.1-55.304, 13.0-92.31, 13.1-37.183, 13.1-53.17, 14.1-25.53 10.07.2024 SB2024071060
#VU93515 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2006-5051
CWE-362 Critical
No
No
12.1-55.309, 13.0-92.31, 13.1-37.190, 13.1-53.24, 14.1-25.56 01.07.2024 SB2006092801
SB2024071109
SB2024071110
and 5 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
12.1-55.309, 13.0-92.31, 13.1-37.190, 13.1-53.24, 14.1-25.56 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more


Showing elements 1 - 20 out of 44