Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Citrix NetScaler

Citrix NetScaler ADC vulnerabilities

8 published CVEs name Citrix NetScaler ADC among the affected products; CISA lists 2 of them as exploited in the wild.

Published CVEs
8
Last 12 months
8
Critical
3
Known exploited
2

Critical 3High 5Medium 0Low 0Not scored 0

Known exploitedNewest addition to KEV first

  • CVE-2026-88772

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Citrix NetScaler · ADC

    ExploitedCritical9.5
  • CVE-2026-88771

    A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

    Citrix NetScaler · ADC

    ExploitedCritical9.5

Newest CVEs

  • CVE-2026-88778

    TCP Initial Sequence Number (ISN) prediction

    Citrix NetScaler · ADC

    High8.8
  • CVE-2026-88777

    Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

    Citrix NetScaler · ADC

    High8.8
  • CVE-2026-88776

    Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

    Citrix NetScaler · ADC

    High8.8
  • CVE-2026-88775

    Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service

    Citrix NetScaler · ADC

    High8.8
  • CVE-2026-88773

    HTTP Request Smuggling

    Citrix NetScaler · ADC

    Critical9.3
  • CVE-2026-88774

    Feature policy bypass due to improper HTTP URL based expression usage

    Citrix NetScaler · ADC

    High7.0
  • CVE-2026-88772

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Citrix NetScaler · ADC

    ExploitedCritical9.5
  • CVE-2026-88771

    A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

    Citrix NetScaler · ADC

    ExploitedCritical9.5