Citrix NetScaler ADC and NetScaler Gateway - Remote Code Execution

critical unauthenticated remote code execution RCE vulnerability affecting Citrix ADC NetScaler ADC and Citrix Gateway appliances configured as a Gateway VPN virtual server, ICA Proxy, CVPN, RDP Proxy or AAA virtual server. Exploitation can lead to arbitrary code execution. id: CVE-2023-3519 info...

CVE_ADC_IOC_2026

CVEADCIOC2026 Controllore precondizioni CVE per NetScaler Autore: Derek Uno script Python per ispezionare i file di configurazione NetScaler ns.conf e determinare se un'appliance soddisfa le precondizioni per specifiche CVE. Lo script analizza la configurazione in esecuzione o i file di...

CVE-2026-8452-check

Citrix NetScaler SAML PrefixList Heap Overflow — Script de Detecção de Estado de Patch Uma verificação segura e não destrutiva do estado do patch para CVE-2026-8452 , o heap overflow de pré-autenticação no canonicalizador de assinatura SAML do Citrix NetScaler ADC / NetScaler Gateway CTX696604,...

CVE-2025-12101-checker

CVE-2025-12101-checker सिट्रिक्स NetScaler ADC / Gateway इंस्टेंसेस को CVE-2025-12101 /cgi/logout पर परावर्तित XSS के लिए एक तैयार SAMLResponse + RelayState पेलोड का उपयोग करके जाँचने के लिए सरल Python PoC। ⚠️ इस उपकरण का उपयोग केवल उन सिस्टमों पर करें जिनके आप मालिक हैं या जिनके परीक्षण के लिए...

Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

Citrix has identified vulnerabilities in NetScaler ADC and NetScaler Gateway. The vulnerability with identifier CVE-2026-19489 involves a memory overflow in NetScaler ADC and NetScaler Gateway when the products are configured as SIP ALG within a Large Scale NAT LSN group. This memory allocation...

NetScaler ADC and NetScaler Gateway Multiple Vulnerabilities (CTX696939)

The remote NetScaler ADC formerly Citrix ADC or NetScaler Gateway formerly Citrix Gateway device is 13.1 prior to 13.1-63.21, or 14.1 prior to 14.1-73.32, or 13.1-FIPS/NDcPP prior to 13.1-37.277, or 14.1-FIPS prior to 14.1-73.32. It is, therefore, affected by multiple vulnerabilities: -...

CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway

Overview On August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carries a CVSS v4.0 base score of 9.3 and can be exploited remotely by an unauthenticated...

CVE-2026-19490

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...

CVE-2026-19489

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...

CVE-2026-19490 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...

EUVD-2026-62395

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...

CVE-2026-19490

CVE-2026-19490 is an authentication bypass (CWE-288) in NetScaler ADC/Gateway affecting versions 14.1 before 73.32 and 13.1 before 63.21, exploitable when SAML actions or Gateway/AAA vservers are configured; no workaround exists, patching to 14.1-73.32 or 13.1-63.21 is required.

EUVD-2026-62394

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...

CVE-2026-19489

Citrix NetScaler ADC and Gateway are affected by a HIGH severity (CVSS 8.8) network-reachable vulnerability. Affected versions span 14.1-73.32 and 13.1-63.21. Impact emphasizes availability with low confidentiality and integrity effects. No root cause, exploit details, or patch version are provid...

CVE-2026-19489

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19489 and CVE-2026-19490

Multiple vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer below for further details. The information on this page is being provided to you on an "AS IS" and "AS-AVAILABLE" basis. The issues described on this page may or...

PT-2026-78351

Name of the Vulnerable Software and Affected Versions NetScaler ADC versions 14.1 through 73.32 NetScaler ADC versions 13.1 through 63.21 NetScaler Gateway versions 14.1 through 73.32 NetScaler Gateway versions 13.1 through 63.21 Description An authentication bypass exists in certain Gateway and...

PT-2026-78327

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21...

Vulnerabilities in Citrix Netscaler ADC and Netscaler Gateway

Citrix has identified vulnerabilities in NetScaler ADC and NetScaler Gateway that are related to inadequate input validation, incorrect access control, and improper memory release. The vulnerabilities, identified as CVE-2026-8451 and CVE-2026-10817, arise from inadequate input validation, where t...

Citrix NetScaler Memory Disclosure - CitrixBleed 2

Insufficient input validation leading to memory overread on the NetScaler Management Interface NetScaler ADC and NetScaler Gateway id: CVE-2025-5777 info: name: Citrix NetScaler Memory Disclosure - CitrixBleed 2 author: watchtowr,DhiyaneshDk,darses severity: critical description: | Insufficient...