Citrix NetScaler ADC

Name: Citrix NetScaler ADC
Brand: Citrix

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

7critical5high1medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4966US	high7.5OT critical	100.0% (100th)	KEV	55.300	2023-10-10	6 versions
CVE-2023-3519US	critical9.8OT critical	99.7% (100th)	KEV	55.297	2023-07-19	5 versions
CVE-2026-3055US	critical9.8OT critical	91.5% (100th)	KEV	no fix	2026-03-23	≤ vers:unknown/*
CVE-2026-88771US	critical9.8OT critical	82.2% (100th)	KEV	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-88772US	high8.1OT critical	78.2% (100th)	KEV	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-88773US	critical10.0	3.36% (89th)	Exploit	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-88776US	critical9.8	0.73% (54th)	Exploit	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-88777US	critical9.8	0.72% (54th)	Exploit	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-88775US	critical9.8	0.72% (54th)	Exploit	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-88778US	high7.5	0.69% (53rd)	Exploit	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-88774US	high7.2	0.40% (34th)	Exploit	no fix	2026-09-27	≤ vers:unknown/*
CVE-2026-4368US	—	3.44% (89th)	—	no fix	2026-03-23	≤ vers:unknown/*
CVE-2023-3466US	medium6.1	2.63% (85th)	—	55.297	2023-07-19	5 versions
CVE-2023-3467US	high8.0	1.31% (70th)	—	37.159	2023-07-19	5 versions

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-342Predictable Exact Value from Previous Values1 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.