https://vulnogram.org/ Most recent CVEs assigned by Citrix Systems, Inc. (citrix). https://vulnogram.org/seaview/icons/citrix.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-53564 https://vulnogram.org/CVE-2026-53564 Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. Medium Tue, 13 Oct 2026 22:07:38 GMT https://vulnogram.org/CVE-2026-53563 https://vulnogram.org/CVE-2026-53563 Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. Medium Tue, 13 Oct 2026 22:04:13 GMT https://vulnogram.org/CVE-2026-84420 https://vulnogram.org/CVE-2026-84420 Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3. Medium Tue, 13 Oct 2026 21:47:44 GMT https://vulnogram.org/CVE-2026-84419 https://vulnogram.org/CVE-2026-84419 Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1. Medium Tue, 13 Oct 2026 21:44:13 GMT https://vulnogram.org/CVE-2026-53562 https://vulnogram.org/CVE-2026-53562 Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2. High Tue, 13 Oct 2026 16:54:56 GMT https://vulnogram.org/CVE-2026-78546 https://vulnogram.org/CVE-2026-78546 Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607. Medium Fri, 11 Sep 2026 19:14:58 GMT https://vulnogram.org/CVE-2026-78547 https://vulnogram.org/CVE-2026-78547 Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607. Medium Fri, 11 Sep 2026 19:07:38 GMT https://vulnogram.org/CVE-2026-18751 https://vulnogram.org/CVE-2026-18751 External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607. Medium Tue, 18 Aug 2026 12:26:35 GMT https://vulnogram.org/CVE-2026-53566 https://vulnogram.org/CVE-2026-53566 Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20. Medium Tue, 14 Jul 2026 13:12:57 GMT https://vulnogram.org/CVE-2026-53565 https://vulnogram.org/CVE-2026-53565 Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. This issue affects Secure Access Client for Windows: before 26.6.1.20; Citrix Endpoint Analysis Client for Win… High Tue, 14 Jul 2026 12:49:17 GMT https://vulnogram.org/CVE-2025-12101 https://vulnogram.org/CVE-2025-12101 Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server Medium Network Exploitable Tue, 11 Nov 2025 13:44:56 GMT https://vulnogram.org/CVE-2025-8424 https://vulnogram.org/CVE-2025-8424 Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access High Tue, 26 Aug 2025 13:11:10 GMT https://vulnogram.org/CVE-2025-7776 https://vulnogram.org/CVE-2025-7776 Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) with PCoIP Profile bo… High Network Exploitable Tue, 26 Aug 2025 13:03:42 GMT https://vulnogram.org/CVE-2025-7775 https://vulnogram.org/CVE-2025-7775 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScal… Critical Known Exploited Network Exploitable Tue, 26 Aug 2025 12:56:53 GMT https://vulnogram.org/CVE-2025-6759 https://vulnogram.org/CVE-2025-6759 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS High Tue, 08 Jul 2025 21:41:21 GMT https://vulnogram.org/CVE-2025-6543 https://vulnogram.org/CVE-2025-6543 Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server Critical Known Exploited Network Exploitable Wed, 25 Jun 2025 12:49:57 GMT https://vulnogram.org/CVE-2025-0320 https://vulnogram.org/CVE-2025-0320 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows High Tue, 17 Jun 2025 13:25:22 GMT https://vulnogram.org/CVE-2025-4879 https://vulnogram.org/CVE-2025-4879 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows High Tue, 17 Jun 2025 13:02:59 GMT https://vulnogram.org/CVE-2025-4365 https://vulnogram.org/CVE-2025-4365 Arbitrary file read in NetScaler Console and NetScaler SDX (SVM) Medium Tue, 17 Jun 2025 12:38:10 GMT https://vulnogram.org/CVE-2025-5349 https://vulnogram.org/CVE-2025-5349 Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway High Tue, 17 Jun 2025 12:32:24 GMT https://vulnogram.org/CVE-2025-5777 https://vulnogram.org/CVE-2025-5777 Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server Critical Known Exploited Network Exploitable Tue, 17 Jun 2025 12:29:34 GMT https://vulnogram.org/CVE-2025-1223 https://vulnogram.org/CVE-2025-1223 An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac Medium Thu, 20 Feb 2025 00:07:27 GMT https://vulnogram.org/CVE-2025-1222 https://vulnogram.org/CVE-2025-1222 An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac Medium Thu, 20 Feb 2025 00:05:23 GMT https://vulnogram.org/CVE-2024-12284 https://vulnogram.org/CVE-2024-12284 Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows. High Wed, 19 Feb 2025 23:30:11 GMT https://vulnogram.org/CVE-2024-8535 https://vulnogram.org/CVE-2024-8535 Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend… Medium Tue, 12 Nov 2024 18:28:51 GMT https://vulnogram.org/CVE-2024-8534 https://vulnogram.org/CVE-2024-8534 Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN… High Network Exploitable Tue, 12 Nov 2024 18:15:44 GMT https://vulnogram.org/CVE-2024-8069 https://vulnogram.org/CVE-2024-8069 Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server Medium Known Exploited Tue, 12 Nov 2024 18:01:15 GMT https://vulnogram.org/CVE-2024-8068 https://vulnogram.org/CVE-2024-8068 Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain Medium Known Exploited Tue, 12 Nov 2024 17:49:54 GMT https://vulnogram.org/CVE-2024-7890 https://vulnogram.org/CVE-2024-7890 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows Medium Wed, 11 Sep 2024 22:32:17 GMT https://vulnogram.org/CVE-2024-7889 https://vulnogram.org/CVE-2024-7889 Local privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows High Wed, 11 Sep 2024 22:16:41 GMT https://vulnogram.org/CVE-2024-6677 https://vulnogram.org/CVE-2024-6677 Privilege escalation in uberAgent High Fri, 12 Jul 2024 02:41:17 GMT https://vulnogram.org/CVE-2024-6149 https://vulnogram.org/CVE-2024-6149 Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 Medium Wed, 10 Jul 2024 20:42:20 GMT https://vulnogram.org/CVE-2024-6148 https://vulnogram.org/CVE-2024-6148 Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 Medium Wed, 10 Jul 2024 20:40:07 GMT https://vulnogram.org/CVE-2024-6150 https://vulnogram.org/CVE-2024-6150 A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning Medium Wed, 10 Jul 2024 20:31:26 GMT https://vulnogram.org/CVE-2024-6286 https://vulnogram.org/CVE-2024-6286 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows High Wed, 10 Jul 2024 20:25:21 GMT https://vulnogram.org/CVE-2024-6151 https://vulnogram.org/CVE-2024-6151 Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Virtual Delivery Agent for Windows used by Citrix Virtual Apps and Desktops and Citrix DaaS High Wed, 10 Jul 2024 20:21:25 GMT https://vulnogram.org/CVE-2024-6236 https://vulnogram.org/CVE-2024-6236 Denial of Service in NetScaler Console (formerly NetScaler ADM), NetScaler Agent, and NetScaler SDX High Wed, 10 Jul 2024 20:18:04 GMT https://vulnogram.org/CVE-2024-6235 https://vulnogram.org/CVE-2024-6235 Sensitive information disclosure in NetScaler Console Critical Wed, 10 Jul 2024 19:07:58 GMT https://vulnogram.org/CVE-2024-5492 https://vulnogram.org/CVE-2024-5492 Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway Medium Network Exploitable Wed, 10 Jul 2024 19:04:40 GMT https://vulnogram.org/CVE-2024-5491 https://vulnogram.org/CVE-2024-5491 Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler High Wed, 10 Jul 2024 18:56:08 GMT https://vulnogram.org/CVE-2024-5661 https://vulnogram.org/CVE-2024-5661 An issue has been identified in both XenServer 8 and Citrix Hypervisor 8.2 CU1 LTSR which may allow a malicious administrator of a guest VM to cause the host to become slow and/or unresponsive. Medium Thu, 13 Jun 2024 05:58:45 GMT https://vulnogram.org/CVE-2024-2049 https://vulnogram.org/CVE-2024-2049 Server-Side Request Forgery (SSRF) in Citrix SD-WAN Standard/Premium Editions on or after 11.4.0 and before 11.4.4.46 allows an attacker to disclose limited information from the appliance via Access to management IP. Medium Network Exploitable Tue, 12 Mar 2024 12:39:45 GMT https://vulnogram.org/CVE-2023-6184 https://vulnogram.org/CVE-2023-6184 Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting Medium Thu, 18 Jan 2024 01:04:15 GMT https://vulnogram.org/CVE-2023-5914 https://vulnogram.org/CVE-2023-5914 Cross-site scripting (XSS) Medium Network Exploitable Wed, 17 Jan 2024 20:19:49 GMT https://vulnogram.org/CVE-2023-6549 https://vulnogram.org/CVE-2023-6549 Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read High Known Exploited Network Exploitable Wed, 17 Jan 2024 20:15:53 GMT https://vulnogram.org/CVE-2023-6548 https://vulnogram.org/CVE-2023-6548 Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Managem… Medium Known Exploited Wed, 17 Jan 2024 20:11:18 GMT https://vulnogram.org/CVE-2023-4967 https://vulnogram.org/CVE-2023-4967 Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server High Network Exploitable Fri, 27 Oct 2023 18:01:59 GMT https://vulnogram.org/CVE-2023-4966 https://vulnogram.org/CVE-2023-4966 Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Critical Known Exploited Network Exploitable Tue, 10 Oct 2023 13:12:17 GMT https://vulnogram.org/CVE-2023-3467 https://vulnogram.org/CVE-2023-3467 Privilege Escalation to root administrator (nsroot) High Wed, 19 Jul 2023 18:35:56 GMT https://vulnogram.org/CVE-2023-3466 https://vulnogram.org/CVE-2023-3466 Reflected Cross-Site Scripting (XSS) High Network Exploitable Wed, 19 Jul 2023 18:21:05 GMT