CVE-2023-4966

CVE-2023-4966 利用脚本 CVE-2023-4966 - NetScaler ADC 和 NetScaler Gateway 内存泄漏利用 用法： usage: python banner.py optional arguments: -h, --help show this help message and exit --target TARGET The Citrix ADC / Gateway target, excluding the protocol e.g. 192.168.1.200...

citrix_dir_traversal_rce

citrixdirtraversalrce 在 Citrix Application Delivery Controller（ADC，即 NetScaler）和 Gateway 10.5、11.1、12.0、12.1 和 13.0 中发现了一个目录遍历漏洞。 当 NSPPE 收到对 GET /vpn/index.html 的请求时，它本应将该请求发送给 Apache 进行处理。然而，通过构造请求 GET /vpn/../vpns/（该请求未经过净化），Apache 将路由转换为 GET /vpns/ 并正常处理这最后一个请求。 这个 /vpns/ 目录之所以引人注目，是因为它包含 Per...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 用于判断Citrix是否受CVE-2025-6543影响的脚本 citrix-cve-2025-6543-check.py 是一款 Python 3 命令行工具，用于识别存在 Citrix 于 2025 年 6 月发布的内存溢出漏洞 CVE-2025-6543 的 NetScaler ADC / Gateway 实例。 该工具专为 Oruss 团队的渗透测试人员和应急响应人员设计，可快速验证生产或实验环境（仅限获得事先授权的情况）。 主要特性 功能 详细说明 远程检测 通过 SNMP v2c sysDescr.0 读取设备版本，或可选地通过 SS...

CVE-2025-5777

🩸 CVE-2025-5777 - CitrixBleed 2 Vulnerabilidad de Divulgación de Memoria en Citrix NetScaler / ADC 📌 1. Resumen Ejecutivo CitrixBleed 2 se refiere a una vulnerabilidad crítica de divulgación de memoria que afecta a: 🏢 Citrix NetScaler ADC 🌐 NetScaler Gateway 🔐 Dispositivos VPN expuestos a Interne...

CVE-2025-12101-Scanner-PoC

CVE-2025-12101 扫描器 针对 CVE-2025-12101 的多线程漏洞扫描器 —— Citrix NetScaler 通过 SAML RelayState 的 XSS 漏洞。 概述 CVE-2025-12101 是 Citrix NetScaler ADC 和 Gateway 产品中的一个反射型 XSS 漏洞，影响 /cgi/logout 端点，通过 RelayState 参数触发。 CVSS 评分： 5.9（中等） 功能特性 ✅ 单主机 -u 或多主机 -f 扫描 ✅ 多线程扫描（1-100 线程） ✅ 唯一载荷验证（零误报） ✅ 双协议测试（HTTP + HTTPS）...

CVE-2026-3055

CVE-2026-3055 - 安全漏洞 严重性： 不适用 CVSS： 不适用 影响： 不适用 发布时间： 2026-03-23 法律声明 仅限授权安全测试使用。 根本原因（简述） 当 NetScaler ADC 和 NetScaler Gateway 配置为 SAML IDP 时，输入验证不足，导致内存过度读取 利用条件 可访问的易受攻击目标 可预测的用户/工作流上下文 无阻止恶意请求的额外加固措施 使用方法 python3 exploit.py https://target.tld 检测 监控可疑的身份验证流程偏差 调查与 CVE-2026-3055 相关的异常直接端点访问 缓解措施...

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configuration data. LevelBlue's Threat Hunt Operations & Research THOR team, which analyzed the...

Vulnerabilities in NetScaler ADC and NetScaler Gateway

Citrix has identified 8 vulnerabilities in NetScaler ADC and NetScaler Gateway. The following supported versions of Citrix NetScaler ADC and Citrix NetScaler Gateway are vulnerable: - Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 before version 14.1-73.37 - Citrix NetScaler ADC and Citri...

Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT

Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group GTIG in September 2026...

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-88772 CVSS score: 9.5, has been described as a memory overflow bu...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 Citrix NetScaler CVE-2026-88771 检测工件生成器 技术细节请参阅我们的博客文章。 实际检测 ./watchTowr-vs-Citrix-Netscaler-CVE-2026-88771.py --target https://netscaler.local/ --command 'id/var/tmp/watchTowr' / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / |...

PT-2026-102621

CVE-2026-88771 & CVE-2026-887722: RCE and/or DoS in Citrix NetScaler ADC and NetScaler Gateway, both rated 9.5 ‍🔥 Citrix disclosed two exploited vulnerabilities. The first CVE-2026-88771 allows an unauthenticated attacker to run arbitrary commands. It affects all NetScaler ADC and NetScaler Gateway...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler 内存越界读取 Citrix Netscaler 越界读取检测构件生成工具！ 检测实战 此检测构件生成器将接受目标 Netscaler 设备，并尝试通过 CVE-2026-8451 泄露内存。 只需提供目标系统。包含协议，例如 https://192.168.80.125。 以下是它泄露部分内存的示例： $ python3 watchTowr-vs-Netscaler-CVE-2026-8451.py https://192.168.80.125 / | | |\ \ \ / / \ \ / | | | | / \ /...

Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Overview On September 27, 2026, Citrix disclosed eight new vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including two critical remote code execution RCE vulnerabilities: CVE-2026-88771 and CVE-2026-88772. Both of these RCE vulnerabilities carry a critical CVSSv4 score of 9.5, an...

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation. The vulnerabilities are listed below - CVE-2026-88771 CVSS score: 9.5 - ...

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) – a system for controlling access to virtual environments – stems from insufficient validation of input data. This allows attackers to execute arbitrary code or trigger service failures.

The vulnerability of the NetScaler ADC application delivery controller previously Citrix ADC and the NetScaler Gateway virtual environment access control system previously Citrix Gateway is related to operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a...

The vulnerability of NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) access control systems, related to insufficient input data validation, allows attackers to execute arbitrary commands.

The vulnerability of NetScaler ADC formerly Citrix ADC and the NetScaler Gateway access control system formerly Citrix Gateway is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2026-88778

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23...

CVE-2026-88772

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service...