CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Security Advisory for NetScaler ADC and Gateway Denial of Service (DoS) Vulnerability (CVE-2026-88779)
[Affected Scope] NetScaler ADC and Gateway versions prior to 14.1-73.41 and 13.1-64.28.
[Impact] Unauthenticated remote attackers can cause a Denial of Service (DoS) and system crash by sending specially crafted packets.
[Mitigation] Immediately apply the latest security patches provided by Citrix.
Citrix NetScaler ADC and Gateway Unauthenticated Remote Code Execution (RCE) Vulnerability (CVE-2026-88771)
[Affected Scope] Citrix NetScaler ADC and Gateway versions prior to 14.1-73.37 and 13.1-64.23, including FIPS/NDcPP variants.
[Impact] Unauthenticated remote attackers can execute arbitrary commands with system privileges, leading to full appliance compromise and potential lateral movement.
[Mitigation] Immediately apply the vendor-supplied security patches and restrict access to management interfaces (NSIP).
Citrix NetScaler ADC and Gateway Authentication Bypass and RCE Vulnerability (CVE-2026-19490)
[Affected Scope] NetScaler ADC and Gateway versions 14.1 (prior to 73.32) and 13.1 (prior to 63.21)
[Impact] Potential for administrative privilege gain and Remote Code Execution (RCE) via authentication bypass
[Mitigation] Apply official Citrix patches and restrict Management Interface (NSIP) access
Citrix NetScaler ADC and Gateway Memory Overflow Vulnerability (CVE-2026-8452) Critical Security Advisory
[Affected Scope] Citrix NetScaler ADC and NetScaler Gateway appliances configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
[Impact] Unauthenticated remote attackers can trigger a memory overflow, leading to unpredictable behavior, Denial of Service (DoS), or potential Remote Code Execution (RCE)
[Mitigation] Immediately apply the official security patches provided by Citrix and restrict external access to affected virtual servers