Vendor hub
Unauthenticated memory overflow in NetScaler SAML SP/IdP processing crashes nsaaad and reboots appliances; exploited as a zero-day before 2026-10-03.
Updated 2026-11-11
| CVE | Product | Added to KEV | Status | Dossier |
|---|---|---|---|---|
| CVE-2026-88779 | Citrix NetScaler | 2026-10-04 | Active exploitation | Read → |
| CVE-2026-88772 | Citrix NetScaler | 2026-09-27 | Active exploitation | Planned |
| CVE-2026-88771 | Citrix NetScaler | 2026-09-27 | Active exploitation | Planned |
| CVE-2026-19490 | Citrix NetScaler | 2026-09-09 | Active exploitation | Planned |
| CVE-2026-8452 | Citrix NetScaler ADC and NetScaler Gateway | 2026-08-26 | Active exploitation | Planned |
| CVE-2026-3055 | Citrix NetScaler | 2026-03-30 | Active exploitation | Planned |
| CVE-2025-7775 | Citrix NetScaler | 2025-08-26 | Active exploitation | Planned |
| CVE-2024-8068 | Citrix Session Recording | 2025-08-25 | Active exploitation | Planned |
| CVE-2024-8069 | Citrix Session Recording | 2025-08-25 | Active exploitation | Planned |
| CVE-2025-5777 | Citrix NetScaler ADC and Gateway | 2025-07-10 | Active exploitation | Planned |
| CVE-2025-6543 | Citrix NetScaler ADC and Gateway | 2025-06-30 | Active exploitation | Planned |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | Active exploitation | Planned |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway | 2024-01-17 | Active exploitation | Planned |
| CVE-2023-4966 | Citrix NetScaler ADC and NetScaler Gateway | 2023-10-18 | Active exploitation | Planned |
| CVE-2023-24489 | Citrix Content Collaboration | 2023-08-16 | Active exploitation | Planned |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway | 2023-07-19 | Active exploitation | Planned |
| CVE-2022-27518 | Citrix Application Delivery Controller (ADC) and Gateway | 2022-12-13 | Active exploitation | Planned |
| CVE-2017-6316 | Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 2022-03-25 | Active exploitation | Planned |
| CVE-2019-12991 | Citrix SD-WAN and NetScaler | 2022-03-25 | Active exploitation | Planned |
| CVE-2019-12989 | Citrix SD-WAN and NetScaler | 2022-03-25 | Active exploitation | Planned |
| CVE-2021-22941 | Citrix ShareFile | 2022-03-25 | Active exploitation | Planned |
| CVE-2019-13608 | Citrix StoreFront Server | 2021-11-03 | Active exploitation | Planned |
| CVE-2020-8193 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Active exploitation | Planned |
| CVE-2020-8195 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Active exploitation | Planned |
| CVE-2020-8196 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 2021-11-03 | Active exploitation | Planned |