Citrix Netscaler Gateway — known CVE vulnerabilities

Every CVE whose affected-product data names Citrix Netscaler Gateway, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (32)

• CVE-2025-6543 — CVSS 9.8 (critical) — actively exploited: Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when…
• CVE-2026-8452 — CVSS 9.8 (critical): Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if…
• CVE-2026-3055 — CVSS 9.8 (critical) — actively exploited: Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
• CVE-2026-8655 — CVSS 9.8 (critical): Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial…
• CVE-2023-3519 — CVSS 9.8 (critical) — actively exploited: Unauthenticated remote code execution
• CVE-2025-7776 — CVSS 9.8 (critical): Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway…
• CVE-2025-7775 — CVSS 9.8 (critical) — actively exploited: Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when…
• CVE-2023-4966 — CVSS 9.4 (critical) — actively exploited: Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN…
• CVE-2025-5349 — CVSS 8.8 (high): Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway
• CVE-2020-8247 — CVSS 8.8 (high): Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before…
• CVE-2023-3466 — CVSS 8.3 (high): Reflected Cross-Site Scripting (XSS)
• CVE-2023-4967 — CVSS 8.2 (high): Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or…
• CVE-2023-6549 — CVSS 8.2 (high) — actively exploited: Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated…
• CVE-2024-8534 — CVSS 8.1 (high): Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be…
• CVE-2021-22927 — CVSS 8.1 (high): A session fixation vulnerability exists in Citrix ADC and Citrix Gateway 13.0-82.45 when configured SAML service provider that could allow…
• CVE-2024-8535 — CVSS 8.1 (high): Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a…
• CVE-2023-3467 — CVSS 8.0 (high): Privilege Escalation to root administrator (nsroot)
• CVE-2024-5491 — CVSS 7.5 (high): Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler
• CVE-2018-5314 — CVSS 7.5 (high): Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0…
• CVE-2020-8246 — CVSS 7.5 (high): Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before…
• CVE-2021-22919 — CVSS 7.5 (high): A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler…
• CVE-2025-5777 — CVSS 7.5 (high) — actively exploited: Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy…
• CVE-2026-10816 — CVSS 7.5 (high): Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with…
• CVE-2026-10817 — CVSS 7.5 (high): Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP…
• CVE-2026-13474 — CVSS 7.5 (high): Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated…
• CVE-2026-8451 — CVSS 7.5 (high): Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is…
• CVE-2020-8299 — CVSS 6.5 (medium): Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix…
• CVE-2020-8300 — CVSS 6.5 (medium): Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from…
• CVE-2020-8245 — CVSS 6.1 (medium): Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15…
• CVE-2024-5492 — CVSS 6.1 (medium): Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler…
• CVE-2015-3642 — CVSS 5.9 (medium): The TLS and DTLS processing functionality in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway devices with…
• CVE-2023-6548 — CVSS 5.5 (medium) — actively exploited: Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP…