Known vulnerabilities in Citrix NetScaler Gateway
Vendor:
Citrix
Software:
Citrix NetScaler Gateway
Software CPE:
cpe:2.3:a:citrix:citrix_netscaler_gateway:*:*:*:*:*:*:*:*
Website:
https://www.citrix.com/
Total vulnerabilities:
48
Public exploits:
10
Known exploited (KEV):
11
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
14.1-73.30
13.1-63.18
14.1-72.61
14.1-72.57
14.1-60.58
13.1-62.23
13.1-62.21
13.1-61.26
14.1-66.59
14.1-66.54
14.1-60.57
14.1-60.52
13.1-37.250
12.1-55.333
13.1-60.32
14.1-56.73
14.1-56.74
14.1-56.71
14.1-51.80
14.1-51.72
13.1-59.22
12.1-55.330
13.1-37.241
14.1-47.48
13.1-59.19
13.1-58.32
14.1-43.56
14.1-47.46
14.1-43.50
14.1-38.53
14.1-29.72
13.1-55.34
14.1-34.42
14.1-29.63
14.1-25.56
13.1-53.24
13.0-92.31
13.1-53.17
14.1-25.53
14.1-21.57
14.1-17.38
13.0-92.21
13.1-51.15
14.1-12.35
14.1-12.30
13.1-49.15
13.0-92.19
12.1-57.18
12.1-65.21
12.1-55.289
12.1-65.25
12.1-55.291
12.1-55.297
12.1-56.22
12.1-58.14
12.1-58.15
12.1-63.22
12.1-64.16
12.1-65.15
12.1-65.35
12.1-55.300
13.0-58.30
13.0-88.12
13.0-58.32
13.0-36.27
13.0-41.20
13.0-41.28
13.0-47.22
13.0-47.24
13.0-52.24
13.0-61.48
13.0-64.35
13.0-67.39
13.0-67.43
13.0-71.40
13.0-71.44
13.0-76.31
13.0-79.64
13.0-82.41
13.0-82.45
13.0-83.27
13.0-83.29
13.0-84.10
13.0-84.11
13.0-85.15
13.0-85.19
13.0-86.17
13.0-87.9
13.0-88.14
13.0-88.16
13.0-89.7
13.0-90.7
13.0-90.12
13.0-91.12
13.0-91.13
13.0-92.18
13.0-90.11
13.1-33.47
13.1-49.13
13.1-37.159
13.1-45.61
13.1-45.63
13.1-4.43
13.1-4.44
13.1-9.60
13.1-12.50
13.1-12.51
13.1-17.42
13.1-21.50
13.1-24.38
13.1-27.59
13.1-30
13.1-30.52
13.1-33.49
13.1-33.52
13.1-33.54
13.1-37.38
13.1-42.47
13.1-45.64
13.1-48.47
14.1-8.50
14.1-4.42
13.0.91.13
13.1.49.13
13.1.48.47
13.1.45.64
13.1.42.47
13.1.37.38
13.1.33.54
13.1.30.52
13.1.27.59
13.1.24.38
13.1.21.50
13.1.17.42
13.1.12.51
13.1.9.60
13.1.4.44
10.5.70.18
11.1.64.14
12.0.63.21
12.1.57.18
13.0.58.30
13.0.47.24
13.0.47.22
13.0.41.28
13.0.41.20
12.1.55.18
12.1.54.16
12.1.53.12
12.1.52.15
12.1.51.20
12.1.51.19
12.1.50.31
12.0.63.13
12.0.62.10
12.0.62.8
12.0.61.9
12.0.61.8
12.0.60.10
12.0.60.9
12.0.59.9
11.1.63.15
11.1.63.9
11.1.62.8
11.1.61.7
11.1.60.14
11.1.60.13
11.0.72.16
11.0.69.123
11.0.68.11
11.0.68.10
11.0.67.12
11.0.66.11
11.0.65.35
11.0.65.31
11.0.64.34
11.0.63.16
11.0.62.10
11.0.55.23
11.0.55.20
10.5.70.12
10.5.70.8
10.5.70.5
10.5.69.5
10.5.66.9
10.5.66.6
10.5.65.11
10.5.64.9
10.5.63.8
10.5.62.9
10.5.61.11
10.5.60.7
10.5.59.13
10.5.59.11
10.5.58.11
10.5.57.7
10.5.56.22
10.5.56.21
10.5.55.8
10.5.54.9
10.5.53.9
10.5.52.11
10.5.51.10
10.5.50.10
10.1.135.21
10.1.135.18
10.1.135.11
10.1.135.10
10.1.135.09
10.1.135.08
10.1.134.9
10.1.133.9
10.1.132.8
10.1.131.11
10.1.131.7
10.1.130.13
10.1.130.11
10.1.129.22
10.1.128.8
10.1.127.10
10.1.126.12
10.1.125.9
10.1.124.13
10.1.123.11
10.1.123.9
10.1.122.17
10.1.122.11
10.1.121.10
10.1.120.13
10.1.119.7
10.1.118.7
10.1.112.15
10.0.78.6
10.0.77.5
10.0.76.7
10.0.75.7007.e
10.0.75.7
10.0.74.4006.e
10.0.74.4
10.0.73.5002.e
10.0.73.5
10.0.72.5005.e
10.0.72.5
10.0.71.6016.e
10.0.71.6008.e
10.0.71.6
10.0.70.7012.e
10.0.70.7002.e
10.0.70.7
10.0.69.4
12.1.49.37
12.1.49.23
12.1
11.1.59.10
11.1.56.19
11.1.56.15
11.1.53.13
11.1.50.10
11.1.49.16
11.1.48.10
11.1.47.14
11.1.41.26
11.1.57.13
11.0.71.22
10.5.69.3
10.5.67.13
10.1
10.0
12.0.59.8
12.0.58.18
12.0.58.15
12.0.57.19
12.0.53.22
12.0.35.6
12.0.57.24
11.1.58.13
11.0.71.24
10.5.68.7
10.5.67.10
11.0.71.18
11.1.57.11
12.0.56.20
11.0.70.16
11.1.55.13
12.0.53.13
11.0.70.12
11.1.51.21
11.1.51.26
11.1.52.13
11.1.53.11
11.1.54.14
11.1.54.16
11.1.55.10
12.0.41.16
12.0.41.22
12.0.41.24
12.0.51.24
12.0.53.6
12.0
11.1
11.0
10.5
10.5e
Vulnerabilities (48)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135996 - Out-of-bounds read CVE-2026-8451 |
CWE-125 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU135997 - Memory corruption CVE-2026-8452 |
CWE-119 | High | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU135998 - Memory corruption CVE-2026-8655 |
CWE-119 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU135999 - External Control of File Name or Path CVE-2026-10816 |
CWE-73 | Low | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU136000 - Out-of-bounds read CVE-2026-10817 |
CWE-125 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU136001 - Missing release of memory after effective lifetime CVE-2026-13474 |
CWE-401 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU124257 - Out-of-bounds read CVE-2026-3055 |
CWE-125 | Critical | 13.1-62.23, 14.1-66.59 | 23.03.2026 |
SB2026032374 |
||
| #VU124256 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-4368 |
CWE-362 | Medium | 14.1-66.54 | 23.03.2026 |
SB2026032373 |
||
| #VU118307 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-12101 |
CWE-79 | Medium | 12.1-55.333, 13.1-37.250, 13.1-60.32, 14.1-56.73 | 11.11.2025 |
SB2025111173 |
||
| #VU114449 - Improper Access Control CVE-2025-8424 |
CWE-284 | Medium | 13.1-59.22, 14.1-47.48 | 27.08.2025 |
SB2025082719 |
||
| #VU114448 - Memory corruption CVE-2025-7776 |
CWE-119 | High | 13.1-59.22, 14.1-47.48 | 27.08.2025 |
SB2025082719 |
||
| #VU114447 - Memory corruption CVE-2025-7775 |
CWE-119 | Critical | 13.1-59.22, 14.1-47.48 | 27.08.2025 |
SB2025082719 |
||
| #VU111952 - Memory corruption CVE-2025-6543 |
CWE-119 | High | 13.1-59.19, 14.1-47.46 | 26.06.2025 |
SB2025062606 |
||
| #VU111237 - Out-of-bounds read CVE-2025-5777 |
CWE-125 | High | 13.1-58.32, 14.1-43.56 | 17.06.2025 |
SB2025061749 |
||
| #VU111236 - Improper Access Control CVE-2025-5349 |
CWE-284 | High | 13.1-58.32, 14.1-43.56 | 17.06.2025 |
SB2025061749 |
||
| #VU100415 - Improper Access Control CVE-2024-8535 |
CWE-284 | Medium | 13.1-55.34, 14.1-29.72 | 13.11.2024 |
SB2024111301 |
||
| #VU100414 - Memory corruption CVE-2024-8534 |
CWE-119 | Medium | 13.1-55.34, 14.1-29.72 | 13.11.2024 |
SB2024111301 |
||
| #VU94075 - Memory corruption CVE-2024-5491 |
CWE-119 | Low | 13.0-92.31, 13.1-53.17, 14.1-25.53 | 10.07.2024 |
SB2024071060 |
||
| #VU93515 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2006-5051 |
CWE-362 | Critical | 14.1-25.56 | 01.07.2024 |
SB2006092801 SB2024071109 SB2024071110 and 5 more |
||
| #VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-6387 |
CWE-362 | High | 14.1-25.56 | 01.07.2024 |
SB2024070144 SB2024070145 SB2024070152 and 89 more |
Showing elements 1 - 20 out of 48