Known vulnerabilities in Citrix NetScaler Gateway
Vendor:
Citrix
Software:
Citrix NetScaler Gateway
Software CPE:
cpe:2.3:a:citrix:citrix_netscaler_gateway:*:*:*:*:*:*:*:*
Website:
https://www.citrix.com/
Total vulnerabilities:
60
Public exploits:
10
Known exploited (KEV):
16
Breakdown by Severity Chart
13.1-64.29
14.1-73.46
14.1-73.41
13.1-64.28
13.1-64.23
14.1-73.37
13.1-63.21
14.1-73.32
14.1-73.30
13.1-63.18
14.1-72.61
14.1-72.57
14.1-60.58
13.1-62.23
13.1-62.21
13.1-61.26
14.1-66.59
14.1-66.54
14.1-60.57
14.1-60.52
13.1-37.250
12.1-55.333
13.1-60.32
14.1-56.73
14.1-56.74
14.1-56.71
14.1-51.80
14.1-51.72
13.1-59.22
12.1-55.330
13.1-37.241
14.1-47.48
13.1-59.19
13.1-58.32
14.1-43.56
14.1-47.46
14.1-43.50
14.1-38.53
14.1-29.72
13.1-55.34
14.1-34.42
14.1-29.63
14.1-25.56
13.1-53.24
13.0-92.31
13.1-53.17
14.1-25.53
14.1-21.57
14.1-17.38
13.0-92.21
13.1-51.15
14.1-12.35
14.1-12.30
13.1-49.15
13.0-92.19
12.1-57.18
12.1-65.21
12.1-55.289
12.1-65.25
12.1-55.291
12.1-55.297
12.1-56.22
12.1-58.14
12.1-58.15
12.1-63.22
12.1-64.16
12.1-65.15
12.1-65.35
12.1-55.300
13.0-58.30
13.0-88.12
13.0-58.32
13.0-36.27
13.0-41.20
13.0-41.28
13.0-47.22
13.0-47.24
13.0-52.24
13.0-61.48
13.0-64.35
13.0-67.39
13.0-67.43
13.0-71.40
13.0-71.44
13.0-76.31
13.0-79.64
13.0-82.41
13.0-82.45
13.0-83.27
13.0-83.29
13.0-84.10
13.0-84.11
13.0-85.15
13.0-85.19
13.0-86.17
13.0-87.9
13.0-88.14
13.0-88.16
13.0-89.7
13.0-90.7
13.0-90.12
13.0-91.12
13.0-91.13
13.0-92.18
13.0-90.11
13.1-33.47
13.1-49.13
13.1-37.159
13.1-45.61
13.1-45.63
13.1-4.43
13.1-4.44
13.1-9.60
13.1-12.50
13.1-12.51
13.1-17.42
13.1-21.50
13.1-24.38
13.1-27.59
13.1-30
13.1-30.52
13.1-33.49
13.1-33.52
13.1-33.54
13.1-37.38
13.1-42.47
13.1-45.64
13.1-48.47
14.1-8.50
14.1-4.42
13.0.91.13
13.1.49.13
13.1.48.47
13.1.45.64
13.1.42.47
13.1.37.38
13.1.33.54
13.1.30.52
13.1.27.59
13.1.24.38
13.1.21.50
13.1.17.42
13.1.12.51
13.1.9.60
13.1.4.44
10.5.70.18
11.1.64.14
12.0.63.21
12.1.57.18
13.0.58.30
13.0.47.24
13.0.47.22
13.0.41.28
13.0.41.20
12.1.55.18
12.1.54.16
12.1.53.12
12.1.52.15
12.1.51.20
12.1.51.19
12.1.50.31
12.0.63.13
12.0.62.10
12.0.62.8
12.0.61.9
12.0.61.8
12.0.60.10
12.0.60.9
12.0.59.9
11.1.63.15
11.1.63.9
11.1.62.8
11.1.61.7
11.1.60.14
11.1.60.13
11.0.72.16
11.0.69.123
11.0.68.11
11.0.68.10
11.0.67.12
11.0.66.11
11.0.65.35
11.0.65.31
11.0.64.34
11.0.63.16
11.0.62.10
11.0.55.23
11.0.55.20
10.5.70.12
10.5.70.8
10.5.70.5
10.5.69.5
10.5.66.9
10.5.66.6
10.5.65.11
10.5.64.9
10.5.63.8
10.5.62.9
10.5.61.11
10.5.60.7
10.5.59.13
10.5.59.11
10.5.58.11
10.5.57.7
10.5.56.22
10.5.56.21
10.5.55.8
10.5.54.9
10.5.53.9
10.5.52.11
10.5.51.10
10.5.50.10
10.1.135.21
10.1.135.18
10.1.135.11
10.1.135.10
10.1.135.09
10.1.135.08
10.1.134.9
10.1.133.9
10.1.132.8
10.1.131.11
10.1.131.7
10.1.130.13
10.1.130.11
10.1.129.22
10.1.128.8
10.1.127.10
10.1.126.12
10.1.125.9
10.1.124.13
10.1.123.11
10.1.123.9
10.1.122.17
10.1.122.11
10.1.121.10
10.1.120.13
10.1.119.7
10.1.118.7
10.1.112.15
10.0.78.6
10.0.77.5
10.0.76.7
10.0.75.7007.e
10.0.75.7
10.0.74.4006.e
10.0.74.4
10.0.73.5002.e
10.0.73.5
10.0.72.5005.e
10.0.72.5
10.0.71.6016.e
10.0.71.6008.e
10.0.71.6
10.0.70.7012.e
10.0.70.7002.e
10.0.70.7
10.0.69.4
12.1.49.37
12.1.49.23
12.1
11.1.59.10
11.1.56.19
11.1.56.15
11.1.53.13
11.1.50.10
11.1.49.16
11.1.48.10
11.1.47.14
11.1.41.26
11.1.57.13
11.0.71.22
10.5.69.3
10.5.67.13
10.1
10.0
12.0.59.8
12.0.58.18
12.0.58.15
12.0.57.19
12.0.53.22
12.0.35.6
12.0.57.24
11.1.58.13
11.0.71.24
10.5.68.7
10.5.67.10
11.0.71.18
11.1.57.11
12.0.56.20
11.0.70.16
11.1.55.13
12.0.53.13
11.0.70.12
11.1.51.21
11.1.51.26
11.1.52.13
11.1.53.11
11.1.54.14
11.1.54.16
11.1.55.10
12.0.41.16
12.0.41.22
12.0.41.24
12.0.51.24
12.0.53.6
12.0
11.1
11.0
10.5
10.5e
Vulnerabilities (60)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU154043 - Memory corruption CVE-2026-107406 |
CWE-119 | Critical | 13.1-64.29, 14.1-73.46 | 09.10.2026 |
SB2026100948 |
||
| #VU153260 - Memory corruption CVE-2026-88779 |
CWE-119 | Medium | 13.1-64.28, 14.1-73.41 | 05.10.2026 |
SB2026100531 |
||
| #VU152297 - Memory corruption CVE-2026-88777 |
CWE-119 | Medium | 13.1-64.23, 14.1-73.37 | 28.09.2026 |
SB2026092701 |
||
| #VU152298 - Predictable Exact Value from Previous Values CVE-2026-88778 |
CWE-342 | Low | 13.1-64.23, 14.1-73.37 | 28.09.2026 |
SB2026092701 |
||
| #VU152292 - Memory corruption CVE-2026-88772 |
CWE-119 | Critical | 13.1-64.23, 14.1-73.37 | 28.09.2026 |
SB2026092701 |
||
| #VU152293 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-88773 |
CWE-444 | High | 13.1-64.23, 14.1-73.37 | 28.09.2026 |
SB2026092701 |
||
| #VU152294 - Configuration CVE-2026-88774 |
CWE-16 | Medium | 13.1-64.23, 14.1-73.37 | 28.09.2026 |
SB2026092701 |
||
| #VU152295 - Memory corruption CVE-2026-88775 |
CWE-119 | Medium | 13.1-64.23, 14.1-73.37 | 28.09.2026 |
SB2026092701 |
||
| #VU152296 - Memory corruption CVE-2026-88776 |
CWE-119 | Medium | 13.1-64.23, 14.1-73.37 | 28.09.2026 |
SB2026092701 |
||
| #VU152266 - Improper input validation CVE-2026-88771 |
CWE-20 | Critical | 13.1-64.23, 14.1-73.37 | 27.09.2026 |
SB2026092701 |
||
| #VU144333 - Memory corruption CVE-2026-19489 |
CWE-119 | Medium | 13.1-63.21, 14.1-73.32 | 19.08.2026 |
SB2026081986 |
||
| #VU144334 - Authentication Bypass Using an Alternate Path or Channel CVE-2026-19490 |
CWE-288 | High | 13.1-63.21, 14.1-73.32 | 19.08.2026 |
SB2026081986 |
||
| #VU135996 - Out-of-bounds read CVE-2026-8451 |
CWE-125 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU135997 - Memory corruption CVE-2026-8452 |
CWE-119 | High | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU135998 - Memory corruption CVE-2026-8655 |
CWE-119 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU135999 - External Control of File Name or Path CVE-2026-10816 |
CWE-73 | Low | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU136000 - Out-of-bounds read CVE-2026-10817 |
CWE-125 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU136001 - Missing release of memory after effective lifetime CVE-2026-13474 |
CWE-401 | Medium | 13.1-63.18, 14.1-72.61 | 30.06.2026 |
SB2026063084 |
||
| #VU124257 - Out-of-bounds read CVE-2026-3055 |
CWE-125 | Critical | 13.1-62.23, 14.1-66.59 | 23.03.2026 |
SB2026032374 |
||
| #VU124256 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2026-4368 |
CWE-362 | Medium | 14.1-66.54 | 23.03.2026 |
SB2026032373 |
Showing elements 1 - 20 out of 60