citrix netscaler gateway

Name: citrix netscaler gateway
Brand: citrix

productUS

cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

13critical23high5medium0low

updated 2026-10-25

vulnerabilities (41)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4966US	high7.5OT critical	100.0% (100th)	KEV	14.1-8.50	2023-10-10	3 versions
CVE-2025-5777US	high7.5OT critical	100.0% (100th)	KEV	13.1-58.32	2025-06-17	2 versions
CVE-2023-3519US	critical9.8OT critical	99.7% (100th)	KEV	13.0-91.13	2023-07-19	2 versions
CVE-2026-19490US	critical9.8OT critical	23.2% (98th)	KEV	13.1-63.21	2026-08-19	2 versions
CVE-2025-7775US	critical9.8OT critical	20.3% (97th)	KEV	13.1-59.22	2025-08-26	2 versions
CVE-2025-6543US	critical9.8OT critical	10.6% (96th)	KEV	13.1-59.19	2025-06-25	2 versions
CVE-2026-88772US	high8.1OT critical	5.30% (93rd)	KEV	13.1-64.23	2026-09-27	2 versions
CVE-2026-88771US	critical9.8OT critical	5.11% (92nd)	KEV	13.1-64.23	2026-09-27	2 versions
CVE-2026-3055US	critical9.8OT critical	4.04% (91st)	KEV	14.1-60.58	2026-03-23	2 versions
CVE-2026-8452US	critical9.8OT critical	1.01% (63rd)	KEV	14.1-72.61	2026-06-30	2 versions
CVE-2023-6549US	high7.5OT critical	57.6% (99th)	KEV	14.1-12.35	2024-01-17	3 versions
CVE-2023-6548US	high8.8OT critical	3.19% (88th)	KEV	13.0-92.21	2024-01-17	3 versions
CVE-2026-88779US	high7.5OT critical	0.59% (48th)	KEV	13.1-64.28	2026-10-04	2 versions
CVE-2025-5349US	high8.8	6.20% (94th)	Exploit	14.1-43.56	2025-06-17	2 versions
CVE-2020-8300US	medium6.5	3.00% (87th)	Exploit	11.1-65.20	2021-06-16	11.1 → 11.1-65.20
CVE-2026-88773US	critical10.0	1.30% (70th)	Exploit	13.1-64.23	2026-09-27	2 versions
CVE-2026-10817US	high7.5	0.56% (46th)	Exploit	14.1-72.61	2026-06-30	2 versions
CVE-2026-8451US	high7.5	0.50% (42nd)	Exploit	14.1-72.61	2026-06-30	2 versions
CVE-2026-88777US	critical9.8	0.38% (31st)	Exploit	13.1-64.23	2026-09-27	2 versions
CVE-2026-88776US	critical9.8	0.38% (31st)	Exploit	13.1-64.23	2026-09-27	2 versions
CVE-2026-88775US	critical9.8	0.38% (31st)	Exploit	13.1-64.23	2026-09-27	2 versions
CVE-2026-88778US	high7.5	0.38% (31st)	Exploit	14.1-73.37	2026-09-27	2 versions
CVE-2026-88774US	high7.2	0.24% (14th)	Exploit	13.1-64.23	2026-09-27	2 versions
CVE-2025-7776US	critical9.8	8.21% (95th)	—	13.1-59.22	2025-08-26	2 versions
CVE-2018-5314US	high7.5	2.85% (87th)	—	no fix	2018-03-01	3 versions
CVE-2023-3466US	medium6.1	2.63% (85th)	—	13.0-91.13	2023-07-19	2 versions
CVE-2020-8246US	high7.5	1.55% (75th)	—	12.1-58.15	2020-09-18	12.1 → 12.1-58.15
CVE-2020-8247US	high8.8	1.35% (71st)	—	12.1-58.15	2020-09-18	12.1 → 12.1-58.15
CVE-2023-3467US	high8.0	1.31% (70th)	—	13.1-49.13	2023-07-19	2 versions
CVE-2023-4967US	high7.5	1.09% (65th)	—	14.1-8.50	2023-10-27	3 versions
CVE-2021-22919US	high7.5	0.94% (61st)	—	11.1-65.22	2021-08-05	11.1 → 11.1-65.22
CVE-2020-8245US	medium6.1	0.93% (60th)	—	12.1-58.15	2020-09-18	12.1 → 12.1-58.15
CVE-2021-22927US	high8.1	0.84% (57th)	—	11.1-65.22	2021-08-05	11.1 → 11.1-65.22
CVE-2024-5491US	high7.5	0.76% (55th)	—	14.1-25.53	2024-07-10	4 versions
CVE-2026-8655US	critical9.8	0.63% (50th)	—	13.1-63.18	2026-06-30	2 versions
CVE-2026-10816US	high7.5	0.58% (47th)	—	14.1-72.61	2026-06-30	2 versions
CVE-2024-8534US	high8.1	0.56% (46th)	—	13.1-55.34	2024-11-12	2 versions
CVE-2026-13474US	high7.5	0.56% (46th)	—	14.1-72.61	2026-06-30	2 versions
CVE-2024-5492US	medium6.1	0.55% (45th)	—	13.1-53.17	2024-07-10	4 versions
CVE-2024-8535US	high8.1	0.42% (35th)	—	14.1-29.72	2024-11-12	2 versions
CVE-2020-8299US	medium6.5	0.42% (35th)	—	11.1-65.20	2021-06-16	11.1 → 11.1-65.20

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer13 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE41 CVEs
NLNCSC-NL (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan