Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

CVE-2025-5777

🩸 CVE-2025-5777 - CitrixBleed 2 Citrix NetScaler / ADC의 메모리 노출 취약점 📌 1. 요약 CitrixBleed 2 는 다음에 영향을 미치는 중요한 메모리 노출 취약점을 말합니다: 🏢 Citrix NetScaler ADC 🌐 NetScaler Gateway 🔐 인터넷에 노출된 VPN 어플라이언스 이 취약점을 통해 인증되지 않은 공격자는 조작된 네트워크 요청을 통해 영향을 받는 장치에서 민감한 메모리 내용을 검색할 수 있습니다. 이러한 유형의 문제는 원래의...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 Citrix가 CVE-2025-6543에 취약한지 확인하는 스크립트 citrix-cve-2025-6543-check.py는 2025년 6월 Citrix가 공개한 메모리 오버플로우 CVE-2025-6543에 취약한 NetScaler ADC / Gateway 인스턴스를 식별하는 명령줄 Python 3 스크립트입니다. Oruss 그룹의 침투 테스터 및 대응 팀을 위해 설계되었으며, 사전 승인을 받은 경우에만 프로덕션 또는 실험실 환경을 신속하게 확인할 수 있습니다. 주요 기능 기능 세부 사항 원...

CVE-2025-12101-Scanner-PoC

CVE-2025-12101 스캐너 CVE-2025-12101 - SAML RelayState를 통한 Citrix NetScaler XSS 취약점을 위한 멀티스레드 스캐너입니다. 개요 CVE-2025-12101은 Citrix NetScaler ADC 및 Gateway 제품에서 RelayState 매개변수를 통해 /cgi/logout 엔드포인트에 영향을 미치는 반사형 XSS 취약점입니다. CVSS 점수: 5.9 중간 기능 ✅ 단일 호스트 -u 또는 다중 호스트 -f 스캔 ✅ 멀티스레드 스캔 1-100 스레드 ✅ 고유 페이로드 검증...

Vulnerability handling in Citrix NetScaler ADC and Gateway

Citrix has identified a vulnerability in NetScaler ADC and Gateway products when these are configured as SAML Service Providers SPs or Identity Providers IdPs. The vulnerability involves a memory overflow that occurs during the processing of SAML messages. This vulnerability can be activated...

EUVD-2026-95315

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only...

CVE-2026-107406

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only...

CVE-2026-107406

A memory overflow vulnerability exists in NetScaler ADC and NetScaler Gateway when configured as a SAML SP or SAML IdP . This flaw can lead to Remote Code Execution (RCE) or a Denial of Service (DoS) . The vulnerability impacts various versions, including NetScaler ADC and Gateway versions before...

CVE-2026-107406 Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: For the following versions: Applicable only...

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-107406

Severity - Critical Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of Citrix NetScaler ADC and Citrix...

CVE-2026-3055

CVE-2026-3055 - 보안 취약점 심각도: N/A CVSS: N/A 영향: N/A 게시일: 2026-03-23 법적 고지 승인된 보안 테스트에만 사용하십시오. 근본 원인요약 SAML IDP로 구성된 NetScaler ADC 및 NetScaler Gateway에서 입력 검증이 불충분하여 메모리 과다 읽기memory overread가 발생합니다. 악용 요건 도달 가능한 취약한 대상 예측 가능한 사용자/워크플로우 컨텍스트 조작된 요청을 차단하는 추가 보안 강화 조치가 없을 것 사용 방법 python3 exploit.py...

PT-2026-108214

Name of the Vulnerable Software and Affected Versions NetScaler ADC and NetScaler Gateway versions prior to 14.1-73.37 NetScaler ADC 14.1-FIPS versions prior to 14.1-73.37 FIPS NetScaler ADC and NetScaler Gateway versions prior to 13.1-64.23 NetScaler ADC 13.1-FIPS versions prior to 13.1-NDcPP...

citrix-netscaler-cve-2026-88771-iocs

Citrix NetScaler CVE-2026-88771: 侵害指標 watchTowr IntelがCVE-2026-88771の実環境での悪用中に観測した侵害指標（IoCs）。CVE-2026-88771は、Citrix NetScaler ADCおよびNetScaler Gatewayにおける未認証のコマンドインジェクション脆弱性です。 このリポジトリの指標は、実際のNetScalerアプライアンスで構成された当社のセンサーネットワーク全体で収集されたものであり、防御担当者が自身の環境で悪用および悪用後の活動を追跡するのに役立てるために共有されています。 目次 iocs.md...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 Citrix NetScaler CVE-2026-88771 の検出アーティファクトジェネレーター 技術的な詳細については、ブログ記事を参照してください。 実際の検出 ./watchTowr-vs-Citrix-Netscaler-CVE-2026-88771.py --target https://netscaler.local/ --command 'id/var/tmp/watchTowr' / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ /...

NetScaler ADC and NetScaler Gateway DoS (CTX697174)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.28, or 14.1 prior to 14.1-73.41, or 13.1-FIPS/NDcPP prior to 13.1-37.282, or 14.1-FIPS prior to 14.1-73.41. It is, therefore, affected by multiple vulnerabilities: - Citrix...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler 메모리 초과 읽기 Citrix Netscaler overread 탐지 아티팩트 생성 도구! 작동 중 탐지 이 탐지 아티팩트 생성기는 대상 Netscaler 장치를 입력받아 CVE-2026-8451을 통해 메모리를 유출하려고 시도합니다. 필요한 것은 대상 시스템뿐입니다. 프로토콜을 포함하세요. 예: https://192.168.80.125. 메모리 일부를 유출하는 예시입니다: $ python3 watchTowr-vs-Netscaler-CVE-2026-8451.py...

⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests

A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding leverage in small things that were easy to overlook. There are actively exploited bugs in the mix, cleaner intrusion paths, smarter...

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779 , carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow...

The vulnerability of the NetScaler ADC application delivery controller (formerly Citrix ADC) and the NetScaler Gateway virtual environment access control system (formerly Citrix Gateway) relates to the occurrence of operations outside the buffer in memory, allowing a malicious actor to cause service failures.

The vulnerability of the NetScaler ADC application delivery controller formerly Citrix ADC and the NetScaler Gateway virtual environment access control system formerly Citrix Gateway is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could all...

netscaler-ctx697096-checker

netscaler-ctx697096-checker Citrix NetScaler ADC / NetScaler Gateway セキュリティアドバイザリ CTX697096 （CVE-2026-88771 から CVE-2026-88778 を対象）向けの読み取り専用の事前条件および露出チェッカーです。 ⚠️ CVE-2026-88771 と CVE-2026-88772 は野外で悪用されており 、CISA KEV カタログに掲載されています。今すぐアップグレードし、インターネットに公開されているアプライアンスについては侵害を前提としてください。 🚨 10月2日以降の新情報:...