Known vulnerabilities in Citrix NetScaler Gateway

Vendor: Citrix
Software CPE: cpe:2.3:a:citrix:citrix_netscaler_gateway:*:*:*:*:*:*:*:*
Total vulnerabilities: 60
Public exploits: 10
Known exploited (KEV): 16

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Citrix NetScaler Gateway Citrix NetScaler Gateway is affected by 60 known vulnerabilities: 8 critical, 12 high, 25 medium, 15 low Critical High Medium Low

Vulnerabilities (60)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU154043 - Memory corruption
CVE-2026-107406
CWE-119 Critical
No
No
13.1-64.29, 14.1-73.46 09.10.2026 SB2026100948
#VU153260 - Memory corruption
CVE-2026-88779
CWE-119 Medium
No
Exploited
13.1-64.28, 14.1-73.41 05.10.2026 SB2026100531
#VU152297 - Memory corruption
CVE-2026-88777
CWE-119 Medium
No
No
13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152298 - Predictable Exact Value from Previous Values
CVE-2026-88778
CWE-342 Low
No
No
13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152292 - Memory corruption
CVE-2026-88772
CWE-119 Critical
No
Exploited
13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152293 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-88773
CWE-444 High
No
No
13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152294 - Configuration
CVE-2026-88774
CWE-16 Medium
No
No
13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152295 - Memory corruption
CVE-2026-88775
CWE-119 Medium
No
No
13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152296 - Memory corruption
CVE-2026-88776
CWE-119 Medium
No
No
13.1-64.23, 14.1-73.37 28.09.2026 SB2026092701
#VU152266 - Improper input validation
CVE-2026-88771
CWE-20 Critical
No
Exploited
13.1-64.23, 14.1-73.37 27.09.2026 SB2026092701
#VU144333 - Memory corruption
CVE-2026-19489
CWE-119 Medium
No
No
13.1-63.21, 14.1-73.32 19.08.2026 SB2026081986
#VU144334 - Authentication Bypass Using an Alternate Path or Channel
CVE-2026-19490
CWE-288 High
No
Exploited
13.1-63.21, 14.1-73.32 19.08.2026 SB2026081986
#VU135996 - Out-of-bounds read
CVE-2026-8451
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135997 - Memory corruption
CVE-2026-8452
CWE-119 High
No
Exploited
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135998 - Memory corruption
CVE-2026-8655
CWE-119 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU135999 - External Control of File Name or Path
CVE-2026-10816
CWE-73 Low
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136000 - Out-of-bounds read
CVE-2026-10817
CWE-125 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU136001 - Missing release of memory after effective lifetime
CVE-2026-13474
CWE-401 Medium
No
No
13.1-63.18, 14.1-72.61 30.06.2026 SB2026063084
#VU124257 - Out-of-bounds read
CVE-2026-3055
CWE-125 Critical
Available
Exploited
13.1-62.23, 14.1-66.59 23.03.2026 SB2026032374
#VU124256 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-4368
CWE-362 Medium
No
No
14.1-66.54 23.03.2026 SB2026032373


Showing elements 1 - 20 out of 60