[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXnrLAmbddULf6IyAD4_QhscaKy89HnDxbZ7H8kv__BY":3,"g5a-family:citrix\u002Fnetscaler_application_delivery_controller":241,"g5a-ex:citrix\u002Fnetscaler_application_delivery_controller@*":245},{"success":4,"data":5},true,{"product":6,"versions":85,"topVulnerabilitiesByEpss":119,"kevVulnerabilities":180,"seoMetadata":219,"meta":238},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":84},"citrix","netscaler_application_delivery_controller",33,26,7,"2025-08-26",[14,19,21,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.0",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"11.1",{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},"11.1-65.22",2,{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},"12.0",{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},"12.1",{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.297",{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.300",{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.302",{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.328",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"12.1-55.330",{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},"13.0",{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-91.13",{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-92.19",{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"13.0-92.21",{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},"13.1",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.159",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.164",{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.176",{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.235",{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.236",{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-37.241",{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-49.13",{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-49.15",{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-51.15",{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-58.32",{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-59.19",{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},"13.1-59.22",{"version":73,"cve_count":17,"kev_count":17,"has_kev":18},"14.1",{"version":75,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-12.35",{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-43.56",{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-47.46",{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-47.48",{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},"14.1-8.50","Netscaler Application Delivery Controller by Citrix is a technology product with 33 tracked versions and 26 known security vulnerabilities including 7 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":23,"kev_count":17,"has_kev":18},{"version":25,"cve_count":16,"kev_count":17,"has_kev":18},{"version":27,"cve_count":17,"kev_count":17,"has_kev":18},{"version":29,"cve_count":17,"kev_count":17,"has_kev":18},{"version":31,"cve_count":17,"kev_count":17,"has_kev":18},{"version":33,"cve_count":17,"kev_count":17,"has_kev":18},{"version":35,"cve_count":17,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":17,"kev_count":17,"has_kev":18},{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":17,"kev_count":17,"has_kev":18},{"version":55,"cve_count":17,"kev_count":17,"has_kev":18},{"version":57,"cve_count":17,"kev_count":17,"has_kev":18},{"version":59,"cve_count":17,"kev_count":17,"has_kev":18},{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":17,"kev_count":17,"has_kev":18},{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},{"version":73,"cve_count":17,"kev_count":17,"has_kev":18},{"version":75,"cve_count":17,"kev_count":17,"has_kev":18},{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},[120,128,135,141,147,154,158,164,169,174],{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":127},"CVE-2023-4966","Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.","2023-10-10",9.4,"v3.1","Critical",0.99999,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"cvssVersion":125,"severity":133,"isKev":4,"epssScore":134},"CVE-2025-5777","Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","2025-06-17",7.5,"High",0.99972,{"cveId":136,"description":137,"publishedDate":138,"cvssScore":139,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":140},"CVE-2023-3519","Unauthenticated remote code execution","2023-07-19",9.8,0.99749,{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"cvssVersion":125,"severity":133,"isKev":4,"epssScore":146},"CVE-2023-6549","Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read","2024-01-17",8.2,0.57633,{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"cvssVersion":152,"severity":126,"isKev":4,"epssScore":153},"CVE-2026-19490","Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.","2026-08-19",9.3,"v4.0",0.32653,{"cveId":155,"description":156,"publishedDate":12,"cvssScore":139,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":157},"CVE-2025-7775","Memory overflow vulnerability leading to Remote Code Execution and\u002For Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server\n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers \n\n(OR)\n\nNetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers\n\n(OR)\n\nCR virtual server with type HDX",0.2067,{"cveId":159,"description":160,"publishedDate":161,"cvssScore":162,"cvssVersion":152,"severity":133,"isKev":4,"epssScore":163},"CVE-2026-88779","Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.","2026-10-04",8.7,0.11388,{"cveId":165,"description":166,"publishedDate":167,"cvssScore":139,"cvssVersion":125,"severity":126,"isKev":4,"epssScore":168},"CVE-2025-6543","Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server","2025-06-25",0.10433,{"cveId":170,"description":171,"publishedDate":131,"cvssScore":172,"cvssVersion":125,"severity":133,"isKev":18,"epssScore":173},"CVE-2025-5349","Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway",8.8,0.06598,{"cveId":175,"description":176,"publishedDate":177,"cvssScore":132,"cvssVersion":178,"severity":133,"isKev":18,"epssScore":179},"CVE-2018-6810","Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to traverse the directory on the target system via a crafted request.","2018-03-06","v3.0",0.04356,[181,185,189,193,197,201,205,213,217],{"cveId":159,"description":160,"publishedDate":161,"cvssScore":162,"severity":133,"isKev":4,"epssScore":163,"cisaVulnName":182,"cisaDateAdded":161,"cisaShortDescription":183,"cisaRequiredAction":184},"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"severity":126,"isKev":4,"epssScore":153,"cisaVulnName":186,"cisaDateAdded":187,"cisaShortDescription":188,"cisaRequiredAction":184},"Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","2026-09-09","Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.",{"cveId":155,"description":156,"publishedDate":12,"cvssScore":139,"severity":126,"isKev":4,"epssScore":157,"cisaVulnName":190,"cisaDateAdded":12,"cisaShortDescription":191,"cisaRequiredAction":192},"Citrix NetScaler Memory Overflow Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and\u002For denial of service.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":129,"description":130,"publishedDate":131,"cvssScore":132,"severity":133,"isKev":4,"epssScore":134,"cisaVulnName":194,"cisaDateAdded":195,"cisaShortDescription":196,"cisaRequiredAction":192},"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","2025-07-10","Citrix NetScaler ADC and Gateway contain an out-of-bounds read vulnerability due to insufficient input validation. This vulnerability can lead to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.",{"cveId":165,"description":166,"publishedDate":167,"cvssScore":139,"severity":126,"isKev":4,"epssScore":168,"cisaVulnName":198,"cisaDateAdded":199,"cisaShortDescription":200,"cisaRequiredAction":192},"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","2025-06-30","Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server.",{"cveId":142,"description":143,"publishedDate":144,"cvssScore":145,"severity":133,"isKev":4,"epssScore":146,"cisaVulnName":202,"cisaDateAdded":144,"cisaShortDescription":203,"cisaRequiredAction":204},"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":206,"description":207,"publishedDate":144,"cvssScore":208,"severity":209,"isKev":4,"epssScore":210,"cisaVulnName":211,"cisaDateAdded":144,"cisaShortDescription":212,"cisaRequiredAction":204},"CVE-2023-6548","Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.",5.5,"Medium",0.03191,"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.",{"cveId":121,"description":122,"publishedDate":123,"cvssScore":124,"severity":126,"isKev":4,"epssScore":127,"cisaVulnName":202,"cisaDateAdded":214,"cisaShortDescription":215,"cisaRequiredAction":216},"2023-10-18","Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.","Apply mitigations and kill all active and persistent sessions per vendor instructions [https:\u002F\u002Fwww.netscaler.com\u002Fblog\u002Fnews\u002Fcve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway\u002F] OR discontinue use of the product if mitigations are unavailable.",{"cveId":136,"description":137,"publishedDate":138,"cvssScore":139,"severity":126,"isKev":4,"epssScore":140,"cisaVulnName":211,"cisaDateAdded":138,"cisaShortDescription":218,"cisaRequiredAction":204},"Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution.",{"title":220,"metaDescription":221,"keywords":222,"structuredData":223},"Netscaler Application Delivery Controller by Citrix - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Netscaler Application Delivery Controller by Citrix covering 33 versions with 26 tracked vulnerabilities including 5 critical and 3 high-severity issues and 7 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Netscaler Application Delivery Controller vulnerabilities, Netscaler Application Delivery Controller security, Netscaler Application Delivery Controller CVE, Citrix Netscaler Application Delivery Controller, Netscaler Application Delivery Controller threat intelligence, Citrix security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Netscaler Application Delivery Controller KEV, Netscaler Application Delivery Controller exploited vulnerabilities",{"@context":224,"@type":225,"name":226,"description":221,"url":227,"manufacturer":228,"applicationCategory":232,"softwareVersion":233,"mainEntity":234},"https:\u002F\u002Fschema.org","SoftwareApplication","Netscaler Application Delivery Controller","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcitrix\u002Fnetscaler_application_delivery_controller",{"@type":229,"name":230,"url":231},"Organization","Citrix","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcitrix","Security Software","33 versions tracked",{"@type":235,"name":236,"description":237,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Netscaler Application Delivery Controller Security Vulnerabilities","Security vulnerabilities affecting Netscaler Application Delivery Controller by Citrix",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":239,"apiVersion":240},"2026-10-28T13:53:18.384Z","3.0",[242],{"product":243,"cves":244},"netscaler_application_delivery_controller_firmware",29,{"rows":246,"total":308,"capped":18,"failed":17},[247,254,261,268,275,281,289,293,301],{"cveId":159,"name":182,"severity":133,"cvss":162,"added":161,"epss":163,"published":248,"ranges":249,"checked":4,"hits":253,"covers":18},"2026-10-04T04:16:43.68",[250,251,252],"13.1 to before 13.1-64.28","14.1 to before 14.1-73.41","14.1-66.68 to 14.1-73.41",[],{"cveId":148,"name":186,"severity":126,"cvss":151,"added":187,"epss":153,"published":255,"ranges":256,"checked":4,"hits":260,"covers":18},"2026-08-19T13:17:45",[257,258,259],"13.1 to before 13.1-63.21","14.1 to before 14.1-73.32","14.1-66.68 to 14.1-73.32",[],{"cveId":155,"name":190,"severity":126,"cvss":139,"added":12,"epss":157,"published":262,"ranges":263,"checked":4,"hits":267,"covers":18},"2025-08-26T13:15:32.87",[264,265,266],"12.1 to before 12.1-55.330","13.1 to before 13.1-59.22","14.1 to before 14.1-47.48",[],{"cveId":129,"name":194,"severity":133,"cvss":132,"added":195,"epss":134,"published":269,"ranges":270,"checked":4,"hits":274,"covers":18},"2025-06-17T13:15:21.523",[271,272,273],"12.1 to before 12.1-55.328","13.1 to before 13.1-58.32","14.1 to before 14.1-43.56",[],{"cveId":165,"name":198,"severity":126,"cvss":139,"added":199,"epss":168,"published":276,"ranges":277,"checked":4,"hits":280,"covers":18},"2025-06-25T13:15:27.293",[278,279],"13.1 to before 13.1-59.19","14.1 to before 14.1-47.46",[],{"cveId":142,"name":202,"severity":133,"cvss":145,"added":144,"epss":146,"published":282,"ranges":283,"checked":4,"hits":288,"covers":18},"2024-01-17T21:15:11.69",[284,285,286,287],"12.1 to before 12.1-55.302","13.0 to before 13.0-92.21","13.1 to before 13.1-51.15","14.1 to before 14.1-12.35",[],{"cveId":206,"name":211,"severity":209,"cvss":208,"added":144,"epss":210,"published":290,"ranges":291,"checked":4,"hits":292,"covers":18},"2024-01-17T20:15:50.627",[284,285,286,287],[],{"cveId":121,"name":202,"severity":126,"cvss":124,"added":214,"epss":127,"published":294,"ranges":295,"checked":4,"hits":300,"covers":18},"2023-10-10T14:15:10.977",[296,297,298,299],"12.1 to before 12.1-55.300","13.0 to before 13.0-92.19","13.1 to before 13.1-49.15","14.1 to before 14.1-8.50",[],{"cveId":136,"name":211,"severity":126,"cvss":139,"added":138,"epss":140,"published":302,"ranges":303,"checked":4,"hits":307,"covers":18},"2023-07-19T18:15:11.513",[304,305,306],"12.1 to before 12.1-55.297","13.0 to before 13.0-91.13","13.1 to before 13.1-49.13",[],9]