NetScaler Gateway

14 known vulnerabilities in NetScaler Gateway, 5 critical, 7 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-88779 CVSS 8.7 high · actively exploited Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
  • CVE-2026-19490 CVSS 9.3 critical · actively exploited Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2026-8452 CVSS 8.8 high · actively exploited Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
  • CVE-2026-3055 CVSS 9.3 critical · actively exploited Citrix NetScaler Out-of-Bounds Read Vulnerability
  • CVE-2025-7775 CVSS 9.2 critical · actively exploited Citrix NetScaler Memory Overflow Vulnerability
  • CVE-2025-6543 CVSS 9.2 critical · actively exploited Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
  • CVE-2025-5777 CVSS 9.3 critical · actively exploited Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

Latest vulnerabilities

  • CVE-2026-88779 CVSS 8.7 high · actively exploited Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
  • CVE-2026-19490 CVSS 9.3 critical · actively exploited Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2026-19489 CVSS 8.8 high Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21…
  • CVE-2026-8655 CVSS 8.8 high Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial…
  • CVE-2026-8452 CVSS 8.8 high · actively exploited Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
  • CVE-2026-8451 CVSS 8.8 high Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is…
  • CVE-2026-13474 CVSS 8.7 high Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated…
  • CVE-2026-10817 CVSS 6.9 medium Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP…
  • CVE-2026-10816 CVSS 7.1 high Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with…
  • CVE-2026-4368 CVSS 7.7 high Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA…
  • CVE-2026-3055 CVSS 9.3 critical · actively exploited Citrix NetScaler Out-of-Bounds Read Vulnerability
  • CVE-2025-7775 CVSS 9.2 critical · actively exploited Citrix NetScaler Memory Overflow Vulnerability
  • CVE-2025-6543 CVSS 9.2 critical · actively exploited Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
  • CVE-2025-5777 CVSS 9.3 critical · actively exploited Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability