CVE-2025-5777

🩸 CVE-2025-5777 - CitrixBleed 2 Memory Disclosure Vulnerability in Citrix NetScaler / ADC 📌 1. Executive Summary CitrixBleed 2 refers to a critical memory disclosure vulnerability affecting: 🏢 Citrix NetScaler ADC 🌐 NetScaler Gateway 🔐 Internet-facing VPN appliances It allows unauthenticated...

Exploit for CVE-2026-107406

CVE-2026-107406 — Citrix NetScaler ADC / Gateway SAML memory...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 Script to check if Citrix is vulnerable to CVE-2025-6543 citrix-cve-2025-6543-check.py is a Python 3 command-line script that identifies NetScaler ADC / Gateway instances vulnerable to the CVE-2025-6543 memory overflow published by Citrix in June 2025. Designed for pentesters...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

NetScaler ADC and Gateway 14.1-73.36 HTTP Request Smuggling

NetScaler ADC and Gateway versions before 14.1-73.37 contain an HTTP request smuggling vulnerability. The included proof of concept sends a crafted chunked HTTP request that causes inconsistent request-boundary interpretation. https://packetstorm.news/download/238752...

CVE-2023-4966

CVE-2023-4966 Exploit Script CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit Usage: usage: python banner.py optional arguments: -h, --help show this help message and exit --target TARGET The Citrix ADC / Gateway target, excluding the protocol e.g. 192.168.1.200...

CVE-2025-12101-Scanner-PoC

CVE-2025-12101 Scanner Multi-threaded vulnerability scanner for CVE-2025-12101 - Citrix NetScaler XSS via SAML RelayState. Overview CVE-2025-12101 is a reflected XSS vulnerability in Citrix NetScaler ADC and Gateway products affecting the /cgi/logout endpoint through the RelayState parameter. CVS...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler memory overread Citrix Netscaler overread Detection Artifact Generator Tool! Detection in Action This Detection Artifact Generator will accept a target Netscaler device, and attempt to leak memroy via CVE-2026-8451. All it needs is the target system. Include the...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 Detection Artifact Generator for Citrix NetScaler CVE-2026-88771 See our blog post for technical details. Detection in Action ./watchTowr-vs-Citrix-Netscaler-CVE-2026-88771.py --target https://netscaler.local/ --command 'id/var/tmp/watchTowr' / | | |\ ...

netscaler-ctx697096-checker

NetScaler checker for CTX697096, CTX697174, CTX697191 and CTX697263 Read-only precondition and exposure checker for the Citrix NetScaler ADC / NetScaler Gateway security bulletin CTX697096 , covering CVE-2026-88771 through CVE-2026-88778 , and for CTX697174 , covering CVE-2026-88779 the SAML cras...

CVE-2026-3055

CVE-2026-3055 - Security Vulnerability Severity: N/A CVSS: N/A Impact: N/A Published: 2026-03-23 Legal For authorized security testing only. Root Cause short version Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

citrix-netscaler-cve-2026-88771-iocs

Citrix NetScaler CVE-2026-88771: Indicators of Compromise Indicators of Compromise IoCs observed by watchTowr Intel during in-the-wild exploitation of CVE-2026-88771, an unauthenticated command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway. Indicators in this repository we...

citrix_dir_traversal_rce

citrixdirtraversalrce A directory traversal was discovered in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. When the NSPPE receives a request for GET /vpn/index.html, it is supposed to send this request to Apache, which processes it...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX697263)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.32, or 14.1 prior to 14.1-73.49, or 13.1-FIPS/NDcPP prior to 13.1-37.286, or 14.1-FIPS prior to 14.1-73.49-FIPS. It is, therefore, affected by multiple vulnerabilities in its...

NetScaler ADC Buffer Overflow DoS

The vulnerability in the NetScaler ADC application controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to a buffer overflow in memory. Exploitation of this vulnerability may allow a remote attacker to cause a denial...

NetScaler ADC Random Initial TCP Session DoS

The vulnerability in the NetScaler ADC application controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the predictability of random initial TCP session numbers. Exploitation of this vulnerability may allow a remo...

NetScaler ADC Code Execution

The vulnerability in the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to flaws in HTTP request processing. Exploitation of this vulnerability may allow a remote attacker to...

NetScaler ADC and Gateway 14.1 HTTP URL Expression Policy Bypass

NetScaler ADC and Gateway versions before specified fixed builds contain an HTTP URL expression policy bypass. This offline Python tool evaluates operator-reported build and configuration evidence for CVE-2026-88774 without contacting appliances or testing exploitability...

Citrix NetScaler ADC and Gateway 14.1-73.36 DTLS Configuration Check

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a DTLS-enabled memory overflow vulnerability that may lead to remote code execution or denial of service. This tool evaluates reported builds and exported DTLS configuration offline...

Citrix NetScaler ADC and Gateway 14.1 HTTP Request Smuggling

Citrix NetScaler ADC and Gateway versions before vendor-fixed builds contain an HTTP request smuggling vulnerability. The supplied offline Python checker assesses operator-reported build and configuration evidence without accessing appliances...