CVE-2026-18751: External Control of File Name or Path

External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607...

PT-2026-76966

Name of the Vulnerable Software and Affected Versions Citrix WorkSpace App version 2607 Description An issue exists in Citrix WorkSpace App on MacOS that allows external control of a file name or path. This occurs when the application does not properly validate the file path provided by an extern...

Citrix NetScaler ADC 13.1 SAML Heap Overflow / Remote Code Execution

Citrix NetScaler ADC and NetScaler Gateway versions prior to 14.1-72.61 and 13.1-63.18 contain a heap overflow vulnerability that can allow an unauthenticated remote attacker to execute arbitrary code when the appliance is configured to use SAML as a service provider or identity provider. This...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

watchTowr-vs-Citrix-Netscaler-PreAuth-RCE Detection Artifact...

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751

Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or may not impact your systems. Cloud Software Group, Inc. and its subsidiaries collectively, "Clou...

Citrix Secure Access < 26.6.1.20 Multiple Vulnerabilities (CTX696734)

The version of Citrix Secure Access installed on the remote host is prior to 26.6.1.20. It is, therefore, affected by multiple vulnerabilities: - An improper privilege management vulnerability allows a low-privileged user to escalate privileges. CVE-2026-53565 - An out-of-bounds read vulnerabilit...

Citrix Hypervisor Page Detection

Detects Citrix Hypervisor Page Detection. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Citrix Hypervisor Page Detection.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Citrix Hypervisor Page Detection',...

Citrix Gateway and Citrix ADC - Cross-Site Scripting Detection

Citrix ADC and Citrix Gateway versions before 13.1 and 13.1-45.61, 13.0 and 13.0-90.11, 12.1 and 12.1-65.35 contain a cross-site scripting vulnerability due to improper input validation. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ADC and Citrix Gateway versions before 13.""" from...

NetScaler AAA Login Panel - Detect

NetScaler AAA login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """NetScaler AAA login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'NetScaler AAA Login Panel - Detect',...

Netscaler Gateway Detection

Citrix NetScaler is an application delivery controller that improves the delivery speed and quality of applications to an end user. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix NetScaler is an application delivery controller that improves the delivery speed and quality of applica.""" from...

Citrix ADC Gateway Login Panel - Detect

Citrix ADC Gateway login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ADC Gateway login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Citrix ADC Gateway Login Panel -...

Citrix ADC/Gateway - Cross-Site Scripting Detection

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 contain a cross-site scripting vulnerability due to improper input validation. !/usr/bin/env python3 -- coding: utf-8 --...

Citrix XenMobile Server - Local File Inclusion Detection

Citrix XenMobile Server 10.12 before RP2, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10 before RP6, and Citrix XenMobile Server before 10.9 RP5 are susceptible to local file inclusion vulnerabilities. reference: -...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection Detection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution Detection

critical unauthenticated remote code execution RCE vulnerability affecting Citrix ADC NetScaler ADC and Citrix Gateway appliances configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Exploitation can lead to arbitrary code execution. !/usr/bin/env python3 ...

Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read Detection

The vulnerability would enable an attacker to remotely obtain sensitive information from a NetScaler appliance configured as a Gateway or AAA virtual server via a very commonly connected Web interface, and without requiring authentication. This bug is nearly identical to the Citrix Bleed...

Citrix ADC and Gateway - Directory Traversal Detection

Citrix Application Delivery Controller ADC and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0 are susceptible to directory traversal vulnerabilities. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix Application Delivery Controller ADC and Gateway 10.""" from kittysploit import from...

Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read Detection

Citrix ShareFile StorageZones aka storage zones Controller versions through at least 5.10.x are susceptible to an unauthenticated arbitrary file read vulnerability. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix ShareFile StorageZones aka storage zones Controller versions through at least...

Citrix StoreFront - Cross-Site Scripting Detection

Reflected Cross-Site Scripting issue which is exploitable without authentication. This vulnerability was exploitable through coercing an error message during an XML parsing procedure in the SSO flow. !/usr/bin/env python3 -- coding: utf-8 -- """Reflected Cross-Site Scripting issue which is...

Citrix VPN Panel - Detect

Citrix VPN panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Citrix VPN panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Citrix VPN Panel - Detect', 'description': 'Citrix VPN panel...