citrix netscaler application delivery controller

Name: citrix netscaler application delivery controller
Brand: citrix

productUS

cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

13critical19high2medium0low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4966US	high7.5OT critical	100.0% (100th)	KEV	13.1-37.164	2023-10-10	5 versions
CVE-2025-5777US	high7.5OT critical	100.0% (100th)	KEV	13.1-58.32	2025-06-17	4 versions
CVE-2023-3519US	critical9.8OT critical	99.7% (100th)	KEV	13.1-37.159	2023-07-19	4 versions
CVE-2026-3055US	critical9.8OT critical	91.5% (100th)	KEV	13.1-62.23	2026-03-23	3 versions
CVE-2026-88771US	critical9.8OT critical	82.2% (100th)	KEV	14.1-73.37	2026-09-27	4 versions
CVE-2026-88772US	high8.1OT critical	78.2% (100th)	KEV	14.1-73.37	2026-09-27	4 versions
CVE-2026-19490US	critical9.8OT critical	32.7% (98th)	KEV	14.1-73.32	2026-08-19	4 versions
CVE-2025-7775US	critical9.8OT critical	20.7% (98th)	KEV	14.1-47.48	2025-08-26	4 versions
CVE-2025-6543US	critical9.8OT critical	10.4% (96th)	KEV	13.1-37.236	2025-06-25	3 versions
CVE-2026-8452US	critical9.8OT critical	1.01% (63rd)	KEV	14.1-72.61	2026-06-30	4 versions
CVE-2023-6549US	high7.5OT critical	57.6% (99th)	KEV	14.1-12.35	2024-01-17	5 versions
CVE-2026-88779US	high7.5OT critical	11.4% (96th)	KEV	14.1-73.41	2026-10-04	4 versions
CVE-2023-6548US	high8.8OT critical	3.19% (88th)	KEV	13.1-37.176	2024-01-17	5 versions
CVE-2025-5349US	high8.8	6.60% (94th)	Exploit	14.1-43.56	2025-06-17	4 versions
CVE-2026-88773US	critical10.0	3.36% (89th)	Exploit	14.1-73.37	2026-09-27	4 versions
CVE-2026-88776US	critical9.8	0.73% (54th)	Exploit	14.1-73.37	2026-09-27	4 versions
CVE-2026-88777US	critical9.8	0.72% (54th)	Exploit	14.1-73.37	2026-09-27	4 versions
CVE-2026-88775US	critical9.8	0.72% (54th)	Exploit	14.1-73.37	2026-09-27	4 versions
CVE-2026-88778US	high7.5	0.69% (53rd)	Exploit	14.1-73.37	2026-09-27	4 versions
CVE-2026-10817US	high7.5	0.56% (46th)	Exploit	14.1-72.61	2026-06-30	4 versions
CVE-2026-8451US	high7.5	0.50% (43rd)	Exploit	13.1-37.272	2026-06-30	4 versions
CVE-2026-88774US	high7.2	0.40% (34th)	Exploit	14.1-73.37	2026-09-27	4 versions
CVE-2025-7776US	critical9.8	9.14% (95th)	—	14.1-47.48	2025-08-26	4 versions
CVE-2018-5314US	high7.5	2.85% (87th)	—	no fix	2018-03-01	3 versions
CVE-2023-3466US	medium6.1	2.63% (85th)	—	13.1-49.13	2023-07-19	5 versions
CVE-2023-3467US	high8.0	1.31% (70th)	—	13.1-37.159	2023-07-19	5 versions
CVE-2023-4967US	high7.5	1.09% (65th)	—	14.1-8.50	2023-10-27	5 versions
CVE-2024-5491US	high7.5	0.76% (55th)	—	13.1-37.183	2024-07-10	6 versions
CVE-2026-8655US	critical9.8	0.63% (50th)	—	13.1-37.272	2026-06-30	4 versions
CVE-2026-10816US	high7.5	0.58% (47th)	—	13.1-37.272	2026-06-30	4 versions
CVE-2024-8534US	high8.1	0.56% (46th)	—	12.1-55.321	2024-11-12	4 versions
CVE-2026-13474US	high7.5	0.56% (46th)	—	13.1-37.272	2026-06-30	4 versions
CVE-2024-5492US	medium6.1	0.55% (46th)	—	14.1-25.53	2024-07-10	6 versions
CVE-2024-8535US	high8.1	0.42% (36th)	—	14.1-29.72	2024-11-12	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer13 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-1284Improper Validation of Specified Quantity in Input1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-284Improper Access Control1 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE34 CVEs
NLNCSC-NL (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan