Product of Citrix
NetScaler ADC and NetScaler Gateway
As of , 5 Citrix NetScaler ADC and NetScaler Gateway vulnerabilities are on CISA's list of exploited vulnerabilities, 2 of them used in ransomware campaigns; 1 was added in 2026. Patch first: CVE-2023-4966.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2023-4966Buffer Overflow | Citrix NetScaler ADC and NetScaler Gateway | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 2 | CVE-2023-3519Code Injection | Citrix NetScaler ADC and NetScaler Gateway | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 3 | CVE-2023-6549Buffer Overflow | Citrix NetScaler ADC and NetScaler Gateway | Patch this weekEPSS 0.58 | 0.58 | ||
| 4 | CVE-2023-6548Code Injection | Citrix NetScaler ADC and NetScaler Gateway | Patch soon | 0.03 | ||
| 5 | CVE-2026-8452Improper Restriction of Operations within the Bounds of a Memory Buffer | Citrix NetScaler ADC and NetScaler Gateway | Patch soon | 0.01 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2023 | 2 |
| 2024 | 2 |
| 2025 | none |
| 2026 | 1 |