Sysprobs Sysprobs

CISA KEV by vendor

Citrix vulnerabilities in the CISA KEV catalogue

27 Citrix entries in CISA's Known Exploited Vulnerabilities catalogue, 7 of them (26 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 4 October 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

27entries, 1.5% of the catalogue
7known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Citrix products in the catalogue, by number of entries
Product, as CISA names itEntries
NetScaler6
NetScaler ADC and NetScaler Gateway5
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance4
Session Recording2
NetScaler ADC and Gateway2
SD-WAN and NetScaler2
Content Collaboration1
Application Delivery Controller (ADC) and Gateway1
ShareFile1
NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server1
StoreFront Server1
Workspace Application and Receiver for Windows1

Latest additions

The 10 most recent Citrix entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-88779NetScaler2026-10-042026-10-07 passedUnknown8.7 High11.3%Auto, partial3 days
CVE-2026-88772NetScaler2026-09-272026-09-30Unknown9.5 Critical78.1%Not auto, total3 days + triage
CVE-2026-88771NetScaler2026-09-272026-09-30Unknown9.5 Critical83.2%Auto, total3 days + triage
CVE-2026-19490NetScaler2026-09-092026-09-12Unknown9.3 Critical32.6%Auto, total3 days + triage
CVE-2026-8452NetScaler ADC and NetScaler Gateway2026-08-262026-08-29Unknown8.8 High1.0%Auto, partial3 days
CVE-2026-3055NetScaler2026-03-302026-04-02Unknown9.3 Critical91.4%Auto, total3 days + triage
CVE-2025-7775NetScaler2025-08-262025-08-28Unknown9.2 Critical20.6%Not auto, total3 days + triage
CVE-2024-8069Session Recording2025-08-252025-09-15Unknown5.1 Medium18.1%Not auto, total3 days + triage
CVE-2024-8068Session Recording2025-08-252025-09-15Unknown5.1 Medium3.4%Not auto, total3 days + triage
CVE-2025-5777NetScaler ADC and Gateway2025-07-102025-07-11Known9.3 Critical99.9%Auto, total3 days + triage

All 27 entries

Every Citrix entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2026-88779NetScaler2026-10-042026-10-07 passedUnknown8.7 High11.3%Auto, partial3 days
CVE-2026-88772NetScaler2026-09-272026-09-30Unknown9.5 Critical78.1%Not auto, total3 days + triage
CVE-2026-88771NetScaler2026-09-272026-09-30Unknown9.5 Critical83.2%Auto, total3 days + triage
CVE-2026-19490NetScaler2026-09-092026-09-12Unknown9.3 Critical32.6%Auto, total3 days + triage
CVE-2026-8452NetScaler ADC and NetScaler Gateway2026-08-262026-08-29Unknown8.8 High1.0%Auto, partial3 days
CVE-2026-3055NetScaler2026-03-302026-04-02Unknown9.3 Critical91.4%Auto, total3 days + triage
CVE-2025-7775NetScaler2025-08-262025-08-28Unknown9.2 Critical20.6%Not auto, total3 days + triage
CVE-2024-8069Session Recording2025-08-252025-09-15Unknown5.1 Medium18.1%Not auto, total3 days + triage
CVE-2024-8068Session Recording2025-08-252025-09-15Unknown5.1 Medium3.4%Not auto, total3 days + triage
CVE-2025-5777NetScaler ADC and Gateway2025-07-102025-07-11Known9.3 Critical99.9%Auto, total3 days + triage
CVE-2025-6543NetScaler ADC and Gateway2025-06-302025-07-21Unknown9.2 Critical10.4%Not auto, total3 days + triage
CVE-2023-6549NetScaler ADC and NetScaler Gateway2024-01-172024-02-07Unknown7.5 High57.6%Auto, partial3 days
CVE-2023-6548NetScaler ADC and NetScaler Gateway2024-01-172024-01-24Unknown8.8 High3.1%Not auto, total3 days + triage
CVE-2023-4966NetScaler ADC and NetScaler Gateway2023-10-182023-11-08Known7.5 High99.9%Auto, total3 days + triage
CVE-2023-24489Content Collaboration2023-08-162023-09-06Unknown9.8 Critical97.3%Auto, total3 days + triage
CVE-2023-3519NetScaler ADC and NetScaler Gateway2023-07-192023-08-09Known9.8 Critical99.7%Not auto, total3 days + triage
CVE-2022-27518Application Delivery Controller (ADC) and Gateway2022-12-132023-01-03Unknown9.8 Critical6.8%Auto, total3 days + triage
CVE-2021-22941ShareFile2022-03-252022-04-15Known9.8 Critical53.5%Auto, total3 days + triage
CVE-2019-12991SD-WAN and NetScaler2022-03-252022-04-15Unknown8.8 High74.4%Not auto, total3 days + triage
CVE-2019-12989SD-WAN and NetScaler2022-03-252022-04-15Unknown9.8 Critical94.9%Auto, total3 days + triage
CVE-2017-6316NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server2022-03-252022-04-15Unknown9.8 Critical73.0%Auto, total3 days + triage
CVE-2020-8196Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance2021-11-032022-05-03Unknown4.3 Medium26.3%Not auto, partial14 days
CVE-2020-8195Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance2021-11-032022-05-03Unknown6.5 Medium33.0%Not auto, partial14 days
CVE-2020-8193Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance2021-11-032022-05-03Unknown6.5 Medium88.2%Auto, partial3 days
CVE-2019-19781Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance2021-11-032022-05-03Known9.8 Critical99.9%Auto, total3 days + triage
CVE-2019-13608StoreFront Server2021-11-032022-05-03Known7.5 High30.0%Auto, partial3 days
CVE-2019-11634Workspace Application and Receiver for Windows2021-11-032022-05-03Known9.8 Critical8.0%Auto, total3 days + triage

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Citrix in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.