---
title: "Citrix: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/citrix/
description: "Every Citrix vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (14), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-10-04
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Citrix: known exploited vulnerabilities

- 2026-10-04 [CVE-2026-88779](https://erroneo.us/security/cve/CVE-2026-88779/index.md) Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (due 2026-10-07; ransomware: Unknown)
- 2026-09-27 [CVE-2026-88772](https://erroneo.us/security/cve/CVE-2026-88772/index.md) Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (due 2026-09-30; ransomware: Unknown)
- 2026-09-27 [CVE-2026-88771](https://erroneo.us/security/cve/CVE-2026-88771/index.md) Citrix NetScaler: Citrix NetScaler Improper Input Validation Vulnerability (due 2026-09-30; ransomware: Unknown)
- 2026-09-09 [CVE-2026-19490](https://erroneo.us/security/cve/CVE-2026-19490/index.md) Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2026-09-12; ransomware: Unknown)
- 2026-08-26 [CVE-2026-8452](https://erroneo.us/security/cve/CVE-2026-8452/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (due 2026-08-29; ransomware: Unknown)
- 2026-03-30 [CVE-2026-3055](https://erroneo.us/security/cve/CVE-2026-3055/index.md) Citrix NetScaler: Citrix NetScaler Out-of-Bounds Read Vulnerability (due 2026-04-02; ransomware: Unknown)
- 2025-08-26 [CVE-2025-7775](https://erroneo.us/security/cve/CVE-2025-7775/index.md) Citrix NetScaler: Citrix NetScaler Memory Overflow Vulnerability (due 2025-08-28; ransomware: Unknown)
- 2025-08-25 [CVE-2024-8069](https://erroneo.us/security/cve/CVE-2024-8069/index.md) Citrix Session Recording: Citrix Session Recording Deserialization of Untrusted Data Vulnerability (due 2025-09-15; ransomware: Unknown)
- 2025-08-25 [CVE-2024-8068](https://erroneo.us/security/cve/CVE-2024-8068/index.md) Citrix Session Recording: Citrix Session Recording Improper Privilege Management Vulnerability (due 2025-09-15; ransomware: Unknown)
- 2025-07-10 [CVE-2025-5777](https://erroneo.us/security/cve/CVE-2025-5777/index.md) Citrix NetScaler ADC and Gateway: Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability (due 2025-07-11; ransomware: Known)
- 2025-06-30 [CVE-2025-6543](https://erroneo.us/security/cve/CVE-2025-6543/index.md) Citrix NetScaler ADC and Gateway: Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (due 2025-07-21; ransomware: Unknown)
- 2024-01-17 [CVE-2023-6549](https://erroneo.us/security/cve/CVE-2023-6549/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (due 2024-02-07; ransomware: Unknown)
- 2024-01-17 [CVE-2023-6548](https://erroneo.us/security/cve/CVE-2023-6548/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability (due 2024-01-24; ransomware: Unknown)
- 2023-10-18 [CVE-2023-4966](https://erroneo.us/security/cve/CVE-2023-4966/index.md) Citrix NetScaler ADC and NetScaler Gateway: Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (due 2023-11-08; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/citrix/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt