netscaler-ctx697096-checker

NetScaler checker for CTX697096, CTX697174, CTX697191 and CTX697263 Read-only precondition and exposure checker for the Citrix NetScaler ADC / NetScaler Gateway security bulletin CTX697096 , covering CVE-2026-88771 through CVE-2026-88778 , and for CTX697174 , covering CVE-2026-88779 the SAML cras...

citrix_dir_traversal_rce

citrixdirtraversalrce A directory traversal was discovered in Citrix Application Delivery Controller ADC, aka NetScaler, and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. When the NSPPE receives a request for GET /vpn/index.html, it is supposed to send this request to Apache, which processes it...

Citrix-cve-2025-6543

Citrix CVE-2025-6543 Script to check if Citrix is vulnerable to CVE-2025-6543 citrix-cve-2025-6543-check.py is a Python 3 command-line script that identifies NetScaler ADC / Gateway instances vulnerable to the CVE-2025-6543 memory overflow published by Citrix in June 2025. Designed for pentesters...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771

watchTowr-vs-Citrix-Netscaler-CVE-2026-88771 Detection Artifact Generator for Citrix NetScaler CVE-2026-88771 See our blog post for technical details. Detection in Action ./watchTowr-vs-Citrix-Netscaler-CVE-2026-88771.py --target https://netscaler.local/ --command 'id/var/tmp/watchTowr' / | | |\ ...

CVE-2026-3055

CVE-2026-3055 - Security Vulnerability Severity: N/A CVSS: N/A Impact: N/A Published: 2026-03-23 Legal For authorized security testing only. Root Cause short version Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread...

CVE-2023-4966

CVE-2023-4966 Exploit Script CVE-2023-4966 - NetScaler ADC and NetScaler Gateway Memory Leak Exploit Usage: usage: python banner.py optional arguments: -h, --help show this help message and exit --target TARGET The Citrix ADC / Gateway target, excluding the protocol e.g. 192.168.1.200...

citrix-netscaler-cve-2026-88771-iocs

Citrix NetScaler CVE-2026-88771: Indicators of Compromise Indicators of Compromise IoCs observed by watchTowr Intel during in-the-wild exploitation of CVE-2026-88771, an unauthenticated command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway. Indicators in this repository we...

CVE-2025-5777

🩸 CVE-2025-5777 - CitrixBleed 2 Memory Disclosure Vulnerability in Citrix NetScaler / ADC 📌 1. Executive Summary CitrixBleed 2 refers to a critical memory disclosure vulnerability affecting: 🏢 Citrix NetScaler ADC 🌐 NetScaler Gateway 🔐 Internet-facing VPN appliances It allows unauthenticated...

CVE-2025-12101-Scanner-PoC

CVE-2025-12101 Scanner Multi-threaded vulnerability scanner for CVE-2025-12101 - Citrix NetScaler XSS via SAML RelayState. Overview CVE-2025-12101 is a reflected XSS vulnerability in Citrix NetScaler ADC and Gateway products affecting the /cgi/logout endpoint through the RelayState parameter. CVS...

watchTowr-vs-Netscaler-CVE-2026-8451

CVE-2026-8451 Citrix Netscaler memory overread Citrix Netscaler overread Detection Artifact Generator Tool! Detection in Action This Detection Artifact Generator will accept a target Netscaler device, and attempt to leak memroy via CVE-2026-8451. All it needs is the target system. Include the...

Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection

Citrix ADC and NetScaler Gateway are susceptible to remote code injection. An attacker can potentially execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. Affected versions are before 13.0-58.30,...

Citrix NetScaler ADC and Gateway 14.1-73.36 DTLS Configuration Check

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a DTLS-enabled memory overflow vulnerability that may lead to remote code execution or denial of service. This tool evaluates reported builds and exported DTLS configuration offline...

NetScaler ADC and Gateway Before 14.1-73.37 TCP Initial Sequence Number Prediction

NetScaler ADC and Gateway versions before the documented fixed builds contain a predictable TCP initial sequence number issue. This offline checker evaluates operator-provided version and configuration evidence without contacting appliances...

Citrix NetScaler ADC and Gateway 14.1 HTTP Request Smuggling

Citrix NetScaler ADC and Gateway versions before vendor-fixed builds contain an HTTP request smuggling vulnerability. The supplied offline Python checker assesses operator-reported build and configuration evidence without accessing appliances...

NetScaler ADC and Gateway 14.1 LSN SIP ALG Memory Overflow

NetScaler ADC and Gateway versions before 14.1-73.32 and 13.1-63.21 contain an LSN SIP ALG memory overflow vulnerability. The supplied offline tool evaluates operator-reported build and configuration evidence...

Citrix NetScaler ADC and Gateway 14.1 Before 14.1-73.37 Memory Overflow Checker

Citrix NetScaler ADC and Gateway versions before the vendor-fixed builds contain a memory overflow vulnerability under specified non-HTTP L7 deployment conditions. This offline Python tool evaluates operator-reported version and configuration evidence without contacting appliances or testing...

NetScaler ADC and Gateway 14.1 HTTP URL Expression Policy Bypass

NetScaler ADC and Gateway versions before specified fixed builds contain an HTTP URL expression policy bypass. This offline Python tool evaluates operator-reported build and configuration evidence for CVE-2026-88774 without contacting appliances or testing exploitability...

Citrix NetScaler ADC / Gateway 14.1 LSN SIP ALG Memory Overflow

Citrix NetScaler ADC and Gateway versions before 14.1-73.32 and 13.1-63.21 contain a memory overflow condition when SIP ALG is enabled on an LSN group. FIPS and NDcPP fixed-build variants are documented...

Citrix NetScaler ADC and Gateway 14.1 and 13.1 Non-HTTP L7 Memory Overflow

Citrix NetScaler ADC and NetScaler Gateway versions before 14.1-73.37 and 13.1-64.23, including applicable FIPS and NDcPP builds, contain a memory overflow vulnerability when configured with a non-HTTP L7 protocol feature...

Citrix NetScaler ADC / Gateway 14.1 Memory Corruption

Citrix NetScaler ADC and Gateway versions before 14.1-73.37 and 13.1-64.23 contain a memory overflow issue when configured with an Oracle-type load-balancing virtual server...