Citrix: CISA KEV History
Every Citrix vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-09-08 · Source: CISA KEV Catalog · Full KEV dashboard
KEV entries
23
Added, last 12 months
2
Ransomware-linked
7
Latest addition
2026-08-26
Citrix KEV additions per month, last 24 months
Most-listed products: NetScaler ADC and NetScaler Gateway, Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance, NetScaler, Session Recording, NetScaler ADC and Gateway.
Latest 23 of 23 Citrix KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the B | 2026-08-26 | No |
| CVE-2026-3055 | Citrix NetScaler Out-of-Bounds Read Vulnerability | 2026-03-30 | No |
| CVE-2025-7775 | Citrix NetScaler Memory Overflow Vulnerability | 2025-08-26 | No |
| CVE-2024-8068 | Citrix Session Recording Improper Privilege Management Vulnerability | 2025-08-25 | No |
| CVE-2024-8069 | Citrix Session Recording Deserialization of Untrusted Data Vulnerability | 2025-08-25 | No |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | 2025-07-10 | Yes |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | 2025-06-30 | No |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 2024-01-17 | No |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 2024-01-17 | No |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | 2023-10-18 | Yes |
| CVE-2023-24489 | Citrix Content Collaboration ShareFile Improper Access Control Vulnerability | 2023-08-16 | No |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | 2023-07-19 | Yes |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerabili | 2022-12-13 | No |
| CVE-2021-22941 | Citrix ShareFile Improper Access Control Vulnerability | 2022-03-25 | Yes |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler Command Injection Vulnerability | 2022-03-25 | No |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler SQL Injection Vulnerability | 2022-03-25 | No |
| CVE-2017-6316 | Citrix Multiple Products Remote Code Execution Vulnerability | 2022-03-25 | No |
| CVE-2019-13608 | Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability | 2021-11-03 | Yes |
| CVE-2020-8193 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | 2021-11-03 | No |
| CVE-2020-8195 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 2021-11-03 | No |
| CVE-2020-8196 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | 2021-11-03 | No |
| CVE-2019-19781 | Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | 2021-11-03 | Yes |
| CVE-2019-11634 | Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability | 2021-11-03 | Yes |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.