Citrix-cve-2025-6543

Citrix CVE-2025-6543 CitrixがCVE-2025-6543に対して脆弱かどうかを判定するスクリプト citrix-cve-2025-6543-check.pyは、2025年6月にCitrixが公開したメモリオーバーフローCVE-2025-6543に対して脆弱なNetScaler ADC / Gatewayインスタンスを識別するPython 3コマンドラインスクリプトです。 Grupo Orussのペネトレーションテスターおよび対応チーム向けに設計されており、本番環境やラボ環境（事前の許可が必要）を迅速に確認できます。 主な特徴 機能 詳細 リモート検出 SNMP...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 Citrix NetScaler CVE-2026-88771 检测工件生成器 技术细节请参阅我们的博客文章。 实际检测 ./watchTowr-vs-Citrix-Netscaler-CVE-2026-88771.py --target https://netscaler.local/ --command 'id/var/tmp/watchTowr' / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / |...

NetScaler ADC and NetScaler Gateway DoS (CTX697174)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-64.28, or 14.1 prior to 14.1-73.41, or 13.1-FIPS/NDcPP prior to 13.1-37.282, or 14.1-FIPS prior to 14.1-73.41. It is, therefore, affected by multiple vulnerabilities: - Citrix...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler 内存越界读取 Citrix Netscaler 越界读取检测构件生成工具！ 检测实战 此检测构件生成器将接受目标 Netscaler 设备，并尝试通过 CVE-2026-8451 泄露内存。 只需提供目标系统。包含协议，例如 https://192.168.80.125。 以下是它泄露部分内存的示例： $ python3 watchTowr-vs-Netscaler-CVE-2026-8451.py https://192.168.80.125 / | | |\ \ \ / / \ \ / | | | | / \ /...

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779 , carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow...

netscaler-ctx697096-checker

netscaler-ctx697096-checker 针对 Citrix NetScaler ADC / NetScaler Gateway 安全公告 CTX697096 的只读前置条件与暴露检查工具，覆盖 CVE-2026-88771 至 CVE-2026-88778 。 ⚠️ CVE-2026-88771 和 CVE-2026-88772 已被在野利用 ，并已列入 CISA KEV 目录。请立即升级，并假定面向互联网的设备已被入侵。 🚨 10 月 2 日新增：一个 SAML 零日漏洞同样影响已修补的设备。 Citrix 确认了一个独立于 CTX697096 的新问题：精心构造的...

Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

Citrix has identified a vulnerability in NetScaler ADC and NetScaler Gateway. This vulnerability involves a memory overflow in versions of NetScaler ADC and NetScaler Gateway that are older than 14.1-73.41 and 13.1-64.28. This vulnerability can lead to a Denial of Service DoS attack, thereby...

CVE-2026-88779

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28...

CVE-2026-88779 Memory overflow vulnerability leading to Denial of Service

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28...

EUVD-2026-92065

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28...

CVE-2026-88779 Memory overflow vulnerability leading to Denial of Service

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28...

CVE-2026-88779

A memory overflow vulnerability (CWE-119) exists in Citrix NetScaler ADC and NetScaler Gateway products. The issue arises when the appliance is configured as a SAML SP or SAML IdP , potentially leading to a Denial of Service (DoS) condition. Affected versions include NetScaler ADC before 14.1-73....

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779

Severity - High Description of Problem A vulnerability has been discovered in Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway. Refer below for further details. Affected Versions: The following supported versions of NetScaler are affected by the...

PT-2026-104603

Name of the Vulnerable Software and Affected Versions NetScaler ADC versions prior to 14.1-73.41 NetScaler ADC versions prior to 13.1-64.28 NetScaler ADC versions prior to 14.1-73.41 FIPS NetScaler ADC versions prior to 13.1-37.282 NetScaler Gateway versions prior to 14.1-73.41 NetScaler Gateway...

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service...

CVE-2023-4966

CVE-2023-4966 エクスプロイトスクリプト CVE-2023-4966 - NetScaler ADC および NetScaler Gateway メモリリークエクスプロイト 使い方: usage: python banner.py optional arguments: -h, --help show this help message and exit --target TARGET The Citrix ADC / Gateway target, excluding the protocol e.g. 192.168.1.200...

citrix_dir_traversal_rce

citrixdirtraversalrce 在 Citrix Application Delivery Controller（ADC，即 NetScaler）和 Gateway 10.5、11.1、12.0、12.1 和 13.0 中发现了一个目录遍历漏洞。 当 NSPPE 收到对 GET /vpn/index.html 的请求时，它本应将该请求发送给 Apache 进行处理。然而，通过构造请求 GET /vpn/../vpns/（该请求未经过净化），Apache 将路由转换为 GET /vpns/ 并正常处理这最后一个请求。 这个 /vpns/ 目录之所以引人注目，是因为它包含 Per...

VulnCheck KEV: CVE-2026-88779

Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service...

CVE-2025-5777

🩸 CVE-2025-5777 - CitrixBleed 2 Citrix NetScaler / ADC におけるメモリ開示の脆弱性 📌 1. エグゼクティブサマリー CitrixBleed 2 は、以下の製品に影響を与える重大なメモリ開示脆弱性を指します。 🏢 Citrix NetScaler ADC 🌐 NetScaler Gateway 🔐 インターネット公開のVPNアプライアンス この脆弱性により、認証されていない攻撃者が巧妙に細工されたネットワークリクエストを送信することで、影響を受けるデバイスから機密性の高いメモリ内容を取得することが可能になります。...