Citrix Systems NetScaler

Name: Citrix Systems NetScaler
Brand: Citrix Systems

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

11critical14high0medium0low

updated 2026-10-23

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-5777US	high7.5OT critical	100.0% (100th)	KEV	no fix	2025-06-17	2 versions
CVE-2025-7775US	critical9.8OT critical	20.3% (97th)	KEV	no fix	2025-08-26	2 versions
CVE-2025-6543US	critical9.8OT critical	10.6% (96th)	KEV	13.1-37.236	2025-06-25	3 versions
CVE-2026-3055US	critical9.8OT critical	4.04% (91st)	KEV	no fix	2026-03-23	6 versions
CVE-2026-88772US	high8.1OT critical	1.30% (70th)	KEV	no fix	2026-09-27	7 versions
CVE-2026-88771US	critical9.8OT critical	1.08% (65th)	KEV	no fix	2026-09-27	7 versions
CVE-2026-8452US	critical9.8OT critical	1.01% (63rd)	KEV	no fix	2026-06-30	7 versions
CVE-2026-88779US	high7.5OT critical	0.59% (48th)	KEV	no fix	2026-10-04	7 versions
CVE-2025-12101US	—	26.3% (98th)	Exploit	no fix	2025-11-11	2 versions
CVE-2025-5349US	high8.8	6.20% (93rd)	Exploit	no fix	2025-06-17	2 versions
CVE-2026-10817US	high7.5	0.56% (46th)	Exploit	no fix	2026-06-30	7 versions
CVE-2026-8451US	high7.5	0.50% (42nd)	Exploit	no fix	2026-06-30	7 versions
CVE-2026-107406US	—	0.47% (40th)	Exploit	no fix	2026-10-08	7 versions
CVE-2026-88776US	critical9.8	0.38% (31st)	Exploit	no fix	2026-09-27	7 versions
CVE-2026-88773US	critical10.0	0.36% (29th)	Exploit	no fix	2026-09-27	7 versions
CVE-2024-12284US	high8.8	13.3% (96th)	—	no fix	2025-02-20	4 versions
CVE-2025-4365US	high7.5	9.67% (95th)	—	no fix	2025-06-17	4 versions
CVE-2025-7776US	critical9.8	8.21% (95th)	—	no fix	2025-08-26	2 versions
CVE-2025-8424US	—	3.34% (89th)	—	no fix	2025-08-26	2 versions
CVE-2026-8655US	critical9.8	0.63% (50th)	—	no fix	2026-06-30	7 versions
CVE-2026-10816US	high7.5	0.58% (47th)	—	no fix	2026-06-30	7 versions
CVE-2024-8534US	high8.1	0.56% (46th)	—	no fix	2024-11-12	2 versions
CVE-2026-13474US	high7.5	0.56% (46th)	—	no fix	2026-06-30	7 versions
CVE-2024-8535US	high8.1	0.42% (35th)	—	no fix	2024-11-12	2 versions
CVE-2026-88777US	critical9.8	0.38% (31st)	—	no fix	2026-09-27	7 versions
CVE-2026-88775US	critical9.8	0.38% (31st)	—	no fix	2026-09-27	7 versions
CVE-2026-88778US	high7.5	0.38% (31st)	—	no fix	2026-09-27	7 versions
CVE-2026-4368US	—	0.31% (22nd)	—	no fix	2026-03-23	6 versions
CVE-2026-88774US	high7.2	0.24% (14th)	—	no fix	2026-09-27	7 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer11 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-1284Improper Validation of Specified Quantity in Input3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-342Predictable Exact Value from Previous Values1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan