Citrix NetScaler ADC and Gateway 14.1-73.36 DTLS Configuration Check

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a DTLS-enabled memory overflow vulnerability that may lead to remote code execution or denial of service. This tool evaluates reported builds and exported DTLS configuration offline...

Citrix NetScaler ADC and Gateway 14.1 HTTP Request Smuggling

Citrix NetScaler ADC and Gateway versions before vendor-fixed builds contain an HTTP request smuggling vulnerability. The supplied offline Python checker assesses operator-reported build and configuration evidence without accessing appliances...

Citrix NetScaler ADC and Gateway 14.1 Before 14.1-73.37 Memory Overflow Checker

Citrix NetScaler ADC and Gateway versions before the vendor-fixed builds contain a memory overflow vulnerability under specified non-HTTP L7 deployment conditions. This offline Python tool evaluates operator-reported version and configuration evidence without contacting appliances or testing...

Citrix NetScaler ADC / Gateway 14.1 LSN SIP ALG Memory Overflow

Citrix NetScaler ADC and Gateway versions before 14.1-73.32 and 13.1-63.21 contain a memory overflow condition when SIP ALG is enabled on an LSN group. FIPS and NDcPP fixed-build variants are documented...

Citrix NetScaler ADC / Gateway URL Expression Policy Bypass

Citrix NetScaler ADC and Gateway versions before the vendor-reported fixed builds contain a feature policy bypass when an HTTP URL based policy expression is configured. This advisory documents affected branches and remediation builds...

Citrix NetScaler ADC / Gateway Security Advisory

Citrix NetScaler ADC and Gateway versions before the documented fixed builds contain a Gateway / AAA memory corruption vulnerability when a Gateway or AAA virtual server is configured...

Citrix NetScaler ADC / Gateway 14.1 Memory Corruption

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a memory overflow issue when configured with an Oracle-type load-balancing virtual server...

Citrix NetScaler ADC and Gateway HTTP Request Smuggling

Citrix NetScaler ADC and Gateway versions before the vendor-reported fixed builds contain an HTTP request smuggling vulnerability when HTTP configuration is enabled...

Exploit for CVE-2026-19489

netscaler-cve-2026-19489-check Standal...

Exploit for Predictable Exact Value from Previous Values in Citrix Netscaler_Application_Delivery_Controller

netscaler-cve-2026-88778-check Standalone...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

netscaler-cve-2026-88777-check Standal...

Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller

netscaler-cve-2026-88774-check Standal...

Citrix Security Advisory for CVE-2026-109618 and CVE-2026-109619

Cloud Software Group is aware of the following vulnerabilities affecting PHP RCE via OOM corruption, CVE-2026-109618 RCE via stale global state, CVE-2026-109619 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or m...

Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway

Update October 9, 2026 : CISA has updated this Alert to: 1 include CVE-2026-107406; 2 include CVE-2026-88779 following its addition to the KEV Catalog on Oct. 4, 2026; 3 clarify the potential relationship between CVE-2026-88779 and CVE-2026-88771; and 4 emphasize the importance of promptly applyi...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406

Severity - Critical Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of Citrix NetScaler ADC and Citrix...

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779 , carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779

Severity - High Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler are affected by the...

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service...

VulnCheck KEV: CVE-2026-88779

Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service...

Vulnerabilities in NetScaler ADC and NetScaler Gateway

Citrix has identified 8 vulnerabilities in NetScaler ADC and NetScaler Gateway. The following supported versions of Citrix NetScaler ADC and Citrix NetScaler Gateway are vulnerable: - Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 before version 14.1-73.37 - Citrix NetScaler ADC and Citri...