5.1Orta
Arbitrary file read and write
Citrix UniconOS
Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
citrix güvenlik açıkları (CVE)
citrix için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.
netscaler_gateway 29netscaler_application_delivery_controller 27application delivery controller firmware 5gateway firmware 5NetScaler ADC 4Citrix Gateway, Citrix ADC 4netscaler gateway firmware 4sd-wan wanop 3secure access client 3netscaler_console 3netscaler sd-wan 3UniconOS 3sd-wan 2Citrix ADC and Citrix Gateway 2workspace 2Secure Access Client for Mac 2Workspace app for Windows 2Secure Access Client for Windows 2session recording 2netscaler sdx firmware 2virtual apps and desktops 1Windows Virtual Delivery Agent for CVAD and Citrix DaaS 1netscaler agent 1Citrix Endpoint Analysis Client for Windows 1WorkSpace App 1Citrix Secure Access Client for Windows 1Citrix Session Recording 1sharefile storage zones controller 1Citrix ShareFile Storage Zones Controller 1netscaler sdx 1sharefile storagezones controller 1Citrix Workspace app for Windows 1storefront server 1provisioning 1gateway plug-in for linux 1receiver 1
6.9Orta
Persistent Command Execution
Citrix UniconOS
Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
6.8Orta
Out-of-Bounds Write
Citrix Workspace app for Windows
Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.
8.5Yüksek
Local Privilege Escalation
Citrix UniconOS
Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.
8.7Yüksek
CVE-2026-88779
KEV
Memory overflow vulnerability leading to Denial of Service
NetScaler ADC; NetScaler Gateway
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
11%EPSS
8.8Yüksek
TCP Initial Sequence Number (ISN) prediction
Citrix NetScaler ADC; Citrix NetScaler Gateway
Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1…
8.8Yüksek
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Citrix NetScaler ADC; Citrix NetScaler Gateway
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and befo…
8.8Yüksek
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Citrix NetScaler ADC; Citrix NetScaler Gateway
Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and befor…
8.8Yüksek
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
Citrix NetScaler ADC; Citrix NetScaler Gateway
Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 …
9.3Kritik
HTTP Request Smuggling
Citrix NetScaler ADC; Citrix NetScaler Gateway
Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 …
3.1%EPSS
7.0Yüksek
Feature policy bypass due to improper HTTP URL based expression usage
Citrix NetScaler ADC; Citrix NetScaler Gateway
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to a fea…
9.5Kritik
CVE-2026-88772
KEV
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
Citrix NetScaler ADC; Citrix NetScaler Gateway
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remot…
77%EPSS
9.5Kritik
CVE-2026-88771
KEV
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
Citrix NetScaler ADC; Citrix NetScaler Gateway
Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 1…
82%EPSS
4.4Orta
Out-of-Bounds Write
Citrix Citrix Workspace app for Windows
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.
9.3Kritik
CVE-2026-19490
KEV
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
NetScaler ADC; NetScaler Gateway
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
33%EPSS
5.2Orta
Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
Citrix WorkSpace App
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.
6.8Orta
Out-of-bounds memory read
Citrix Citrix Secure Access Client for Windows
Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20.
8.5Yüksek
Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges
Citrix Secure Access Client for Windows; Citrix Citrix Endpoint Analysis Client for Windows
Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. This issue affects Secure Access Client for Windows: before 26.6.1.20; Citrix Endpoint Analysis Client for Windows: be…
8.7Yüksek
Denial of service via malformed HTTP/2 requests
NetScaler ADC; NetScaler Gateway
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
6.9Orta
Insufficient input validation leading to memory overread
NetScaler ADC; NetScaler Gateway
Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
7.1Yüksek
Arbitrary File Read (Unauthenticated)
NetScaler ADC; NetScaler Gateway
Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled
8.8Yüksek
Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service
NetScaler ADC; NetScaler Gateway
Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetSca…
8.8Yüksek
CVE-2026-8452
KEV
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
NetScaler ADC; NetScaler Gateway
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
1.0%EPSS
8.8Yüksek
Insufficient input validation leading to memory overread
NetScaler ADC; NetScaler Gateway
Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP
4.8Orta
Wazuh Provisioning Scripts / Build Infrastructure Improper Certificate Validation leading to MITM and RCE
Wazuh Wazuh Provisioning Scripts (Agent Build Environment)
Wazuh provisioning scripts and Dockerfiles contain an insecure transport vulnerability where curl is invoked with the -k/--insecure flag, disabling SSL/TLS certificate validation. Attackers with network access can perform man-in-the-middle attacks to intercep…