Overview 57 matches · 0 in Waratek scope · 0 protected · 25 exploited · 18 CISA KEV · 23 public PoC · 14 EPSS ≥ 0.5
57matches
0in Waratek scope0.0%
0protected0.0%
25exploited43.9%
18CISA KEV31.6%
23public PoC40.4%
14EPSS ≥ 0.524.6%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
1.8%
Not applicable
56
98.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
57
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
25
43.9%
Working exploit published
2
3.5%
Proof of concept only
0
0.0%
Forecast only
1
1.8%
No public exploit
29
50.9%
split by
peak 13 / year
20142
Not applicable2
Critical2
not blocked2
Exploited2
20150
20163
Not applicable3
Critical3
not blocked3
No public exploit3
20175
Outside Waratek scope1
Not applicable4
Critical5
not blocked5
Exploited1
No public exploit4
201811
Not applicable11
Critical11
not blocked11
Working exploit published1
No public exploit10
201913
Not applicable13
Critical13
not blocked13
Exploited8
Forecast only1
No public exploit4
20204
Not applicable4
Critical4
not blocked4
No public exploit4
20212
Not applicable2
Critical2
not blocked2
Exploited1
No public exploit1
20224
Not applicable4
Critical4
not blocked4
Exploited2
No public exploit2
20234
Not applicable4
Critical4
not blocked4
Exploited3
No public exploit1
20241
Not applicable1
Critical1
not blocked1
Exploited1
20253
Not applicable3
Critical3
not blocked3
Exploited3
20265
Not applicable5
Critical5
not blocked5
Exploited4
Working exploit published1
2014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-88773 | Critical | 2026-09-27 | Not applicable | Working exploit published | Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 and NDcPP; Gateway: before 14.1-73.37 FIPS and before 13.1-64.23. |
| CVE-2026-88772 | Critical | 2026-09-27 | Not applicable | Exploited | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service |
| CVE-2026-88771 | Critical | 2026-09-27 | Not applicable | Exploited | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands. |
| CVE-2026-19490 | Critical | 2026-08-19 | Not applicable | Exploited | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21. |
| CVE-2026-3055 | Critical | 2026-03-23 | Not applicable | Exploited | Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread |
| CVE-2025-7775 | Critical | 2025-08-26 | Not applicable | Exploited | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with IPv6 services or servicegroups bound with IPv6 servers (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FIPS and NDcPP: LB virtual servers of type (HTTP, SSL or HTTP_QUIC) bound with DBS IPv6 services or servicegroups bound with IPv6 DBS servers (OR) CR virtual server with type HDX |
| CVE-2025-6543 | Critical | 2025-06-25 | Not applicable | Exploited | Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server |
| CVE-2025-5777 | Critical | 2025-06-17 | Not applicable | Exploited | Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server |
| CVE-2024-6235 | Critical | 2024-07-10 | Not applicable | Exploited | Sensitive information disclosure in NetScaler Console |
| CVE-2023-4966 | Critical | 2023-10-10 | Not applicable | Exploited | Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. |
| CVE-2023-3519 | Critical | 2023-07-19 | Not applicable | Exploited | Unauthenticated remote code execution |
| CVE-2023-24492 | Critical | 2023-07-11 | Not applicable | No public exploit | A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a victim user opens an attacker-crafted link and accepts further prompts. |
| CVE-2023-24489 | Critical | 2023-07-10 | Not applicable | Exploited | A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller. |
| CVE-2022-27518 | Critical | 2022-12-13 | Not applicable | Exploited | Unauthenticated remote arbitrary code execution |
| CVE-2022-27516 | Critical | 2022-11-08 | Not applicable | No public exploit | User login brute force protection functionality bypass |
| CVE-2022-27513 | Critical | 2022-11-08 | Not applicable | No public exploit | Remote desktop takeover via phishing |
| CVE-2022-27510 | Critical | 2022-11-08 | Not applicable | Exploited | Unauthorized access to Gateway user capabilities |
| CVE-2021-22941 | Critical | 2021-09-23 | Not applicable | Exploited | Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an unauthenticated attacker to remotely compromise the storage zones controller. |
| CVE-2021-22891 | Critical | 2021-05-27 | Not applicable | No public exploit | A missing authorization vulnerability exists in Citrix ShareFile Storage Zones Controller before 5.7.3, 5.8.3, 5.9.3, 5.10.1 and 5.11.18 may allow unauthenticated remote compromise of the Storage Zones Controller. |
| CVE-2020-8257 | Critical | 2020-12-14 | Not applicable | No public exploit | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks |
| CVE-2020-8271 | Critical | 2020-11-16 | Not applicable | No public exploit | Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 |
| CVE-2020-8212 | Critical | 2020-08-17 | Not applicable | No public exploit | Improper access control in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows access to privileged functionality. |
| CVE-2020-8211 | Critical | 2020-08-17 | Not applicable | No public exploit | Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection. |
| CVE-2019-19781 | Critical | 2019-12-27 | Not applicable | Exploited | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. |
| CVE-2019-18225 | Critical | 2019-10-21 | Not applicable | No public exploit | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway before 10.5 build 70.8, 11.x before 11.1 build 63.9, 12.0 before build 62.10, 12.1 before build 54.16, and 13.0 before build 41.28. An attacker with management-interface access can bypass authentication to obtain appliance administrative access. These products formerly used the NetScaler brand name. |
| CVE-2019-12990 | Critical | 2019-07-16 | Not applicable | Exploited | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow Directory Traversal. |
| CVE-2019-12989 | Critical | 2019-07-16 | Not applicable | Exploited | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. |
| CVE-2019-12988 | Critical | 2019-07-16 | Not applicable | Exploited | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 4 of 6). |
| CVE-2019-12987 | Critical | 2019-07-16 | Not applicable | Exploited | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 3 of 6). |
| CVE-2019-12986 | Critical | 2019-07-16 | Not applicable | Exploited | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 2 of 6). |
| CVE-2019-12985 | Critical | 2019-07-16 | Not applicable | Exploited | Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation (issue 1 of 6). |
| CVE-2019-12292 | Critical | 2019-06-24 | Not applicable | No public exploit | Citrix AppDNA before 7 1906.1.0.472 has Incorrect Access Control. |
| CVE-2019-9548 | Critical | 2019-06-05 | Not applicable | No public exploit | Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control. |
| CVE-2018-18571 | Critical | 2019-06-05 | Not applicable | No public exploit | An Incorrect Access Control vulnerability has been identified in Citrix XenMobile Server 10.8.0 before Rolling Patch 6 and 10.9.0 before Rolling Patch 3. An attacker can impersonate and take actions on behalf of any Mobile Application Management (MAM) enrolled device. |
| CVE-2019-10883 | Critical | 2019-06-03 | Not applicable | Forecast only | Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection. |
| CVE-2019-11634 | Critical | 2019-05-22 | Not applicable | Exploited | Citrix Workspace App before 1904 for Windows has Incorrect Access Control. |
| CVE-2018-17448 | Critical | 2018-10-23 | Not applicable | No public exploit | An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. |
| CVE-2018-17446 | Critical | 2018-10-23 | Not applicable | No public exploit | A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. |
| CVE-2018-17445 | Critical | 2018-10-23 | Not applicable | No public exploit | A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4. |
| CVE-2018-14007 | Critical | 2018-08-15 | Not applicable | No public exploit | Citrix XenServer 7.1 and newer allows Directory Traversal. |
| CVE-2017-2620 | Critical | 2018-07-27 | Not applicable | No public exploit | Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process. |
| CVE-2016-9603 | Critical | 2018-07-27 | Not applicable | No public exploit | A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur when a VNC client attempted to update its display after a VGA operation is performed by a guest. A privileged user/process inside a guest could use this flaw to crash the QEMU process or, potentially, execute arbitrary code on the host with privileges of the QEMU process. |
| CVE-2017-2615 | Critical | 2018-07-03 | Not applicable | No public exploit | Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host. |
| CVE-2018-10653 | Critical | 2018-05-23 | Not applicable | Working exploit published | There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. |
| CVE-2018-10648 | Critical | 2018-05-23 | Not applicable | No public exploit | There are Unauthenticated File Upload Vulnerabilities in Citrix XenMobile Server 10.8 before RP2 and 10.7 before RP3. |
| CVE-2018-7218 | Critical | 2018-05-17 | Not applicable | No public exploit | The AppFirewall functionality in Citrix NetScaler Application Delivery Controller and NetScaler Gateway 10.5 before Build 68.7, 11.0 before Build 71.24, 11.1 before Build 58.13, and 12.0 before Build 57.24 allows remote attackers to execute arbitrary code via unspecified vectors. |
| CVE-2018-6809 | Critical | 2018-03-06 | Not applicable | No public exploit | NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allow remote attackers to gain privilege on a target system. |
| CVE-2015-7705 | Critical | 2017-08-07 | Outside Waratek scope | No public exploit | The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large number of crafted requests. |
| CVE-2017-6316 | Critical | 2017-07-20 | Not applicable | Exploited | Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID cookie. On CloudBridge (the former name of NetScaler SD-WAN) devices, the cookie name was CAKEPHP rather than CGISESSID. |
| CVE-2016-9679 | Critical | 2017-01-18 | Not applicable | No public exploit | Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code by overwriting a function pointer. |
| CVE-2016-9678 | Critical | 2017-01-18 | Not applicable | No public exploit | Use-after-free vulnerability in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors. |
| CVE-2016-9676 | Critical | 2017-01-18 | Not applicable | No public exploit | Buffer overflow in Citrix Provisioning Services before 7.12 allows attackers to execute arbitrary code via unspecified vectors. |
| CVE-2016-6493 | Critical | 2016-08-19 | Not applicable | No public exploit | Citrix XenApp 6.x before 6.5 HRP07 and 7.x before 7.9 and Citrix XenDesktop before 7.9 might allow attackers to weaken an unspecified security mitigation via vectors related to memory permission. |
| CVE-2016-5302 | Critical | 2016-06-13 | Not applicable | No public exploit | Citrix XenServer 7.0 before Hotfix XS70E003, when a deployment has been upgraded from an earlier release, might allow remote attackers on the management network to "compromise" a host by leveraging credentials for an Active Directory account. |
| CVE-2016-2071 | Critical | 2016-02-17 | Not applicable | No public exploit | Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, and 10.5.e before Build 59.1305.e allows remote attackers to gain privileges via unspecified NS Web GUI commands. |
| CVE-2014-7169 | Critical | 2014-09-25 | Not applicable | Exploited | GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271. |
| CVE-2014-6271 | Critical | 2014-09-24 | Not applicable | Exploited | GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka "ShellShock." NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix. |