Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Citrix
Netscaler Gateway

citrix netscaler gateway Vulnerabilities: CVEs, CISA KEV & Security Advisories

43 CVEs

9 in CISA KEV

citrix netscaler gateway Vulnerabilities

CVE security advisories and vulnerability history for netscaler gateway by citrix.

43

Total CVEs

Published

9

In CISA KEV

Exploited in the wild

9

Public exploits

With known exploit

8.4

Avg CVSS

2016–2026

Last updated March 23, 2026

Overview

citrix netscaler gateway has 43 published CVE records since 2016, of which 9 are in CISA's Known Exploited Vulnerabilities catalog and 9 have a known public exploit. The average CVSS base score across scored CVEs is 8.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting citrix netscaler gateway, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of citrix netscaler gateway's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High10

Medium2

Low0

24 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

9

9 of citrix netscaler gateway's CVEs are confirmed exploited in the wild.

Public exploits

9

9 of citrix netscaler gateway's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every citrix netscaler gateway version named in a CVE, then pick one to see only the CVEs that affect it.

Fixed in

12.1-58.153 CVEs
13.0-91.133 CVEs
13.1-49.133 CVEs
49.133 CVEs
91.133 CVEs
11.1-65.202 CVEs
11.1-65.222 CVEs
13.0-92.192 CVEs
13.0-92.212 CVEs
13.0-92.312 CVEs
13.1-49.152 CVEs
13.1-51.152 CVEs
13.1-53.172 CVEs
13.1-55.342 CVEs
13.1-58.322 CVEs
13.1-59.222 CVEs
14.1-12.352 CVEs
14.1-25.532 CVEs
14.1-29.722 CVEs
14.1-43.562 CVEs
14.1-47.482 CVEs
14.1-8.502 CVEs
13.1-59.191 CVE
13.1-62.231 CVE
14.1-47.461 CVE
14.1-60.581 CVE
49.151 CVE
8.501 CVE
92.191 CVE

Find a version

43 CVEs

Sort

Insufficient input validation leading to memory overread
CVE-2026-3055
CISA KEV
Public exploit
Patch
CWE-125
Added to CISA KEV 2026-03-30
Critical · CVSS 9.3
EPSS 89.8% (100th pct)2026-03-23
Improper access control on the NetScaler Management Interface
CVE-2025-8424
Patch
CWE-1284
High · CVSS 8.7
EPSS 0.4% (60th pct)2025-08-26
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
CVE-2025-7776
Patch
CWE-119
High · CVSS 8.8
EPSS 0.3% (55th pct)2025-08-26
Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
CVE-2025-7775
CISA KEV
Public exploit
Patch
CWE-119
Added to CISA KEV 2025-08-26
Critical · CVSS 9.2
EPSS 7.8% (92th pct)2025-08-26
Memory overflow vulnerability leading to unintended control flow and Denial of Service
CVE-2025-6543
CISA KEV
Public exploit
Patch
CWE-119
Added to CISA KEV 2025-06-30
Critical · CVSS 9.2
EPSS 1.1% (78th pct)2025-06-25
NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
CVE-2025-5349
Patch
CWE-1284
High · CVSS 8.7
EPSS 0.9% (76th pct)2025-06-17
NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
CVE-2025-5777
CISA KEV
Public exploit
Patch
CWE-125
Added to CISA KEV 2025-07-10
Critical · CVSS 9.3
EPSS 65.0% (98th pct)2025-06-17
Medium vulnerability · 2024-11-12
CVE-2024-8535
Patch
CWE-552
Medium · CVSS 5.8
EPSS 0.9% (76th pct)2024-11-12
Memory safety vulnerability leading to memory corruption and Denial of Service
CVE-2024-8534
Patch
CWE-119
High · CVSS 8.4
EPSS 1.3% (80th pct)2024-11-12
Medium vulnerability · 2024-07-10
CVE-2024-5492
Patch
CWE-601
Medium · CVSS 5.1
EPSS 3.0% (87th pct)2024-07-10
High vulnerability · 2024-07-10
CVE-2024-5491
Patch
High · CVSS 7.2
EPSS 0.4% (64th pct)2024-07-10
High vulnerability · 2024-01-17
CVE-2023-6549
CISA KEV
Public exploit
Patch
CWE-119
Added to CISA KEV 2024-01-17
High · CVSS 8.8
EPSS 80.2% (99th pct)2024-01-17
High vulnerability · 2024-01-17
CVE-2023-6548
CISA KEV
Public exploit
Patch
CWE-94
Added to CISA KEV 2024-01-17
High · CVSS 8.6
EPSS 6.5% (91th pct)2024-01-17
High vulnerability · 2023-10-27
CVE-2023-4967
Patch
CWE-119
High · CVSS 8.2
EPSS 0.6% (69th pct)2023-10-27
Unauthenticated sensitive information disclosure
CVE-2023-4966
CISA KEV
Public exploit
Patch
CWE-119
Added to CISA KEV 2023-10-18
Critical · CVSS 9.3
EPSS 94.3% (100th pct)2023-10-10
High vulnerability · 2023-07-19
CVE-2023-3467
Patch
CWE-269
High · CVSS 8.0
EPSS 0.4% (61th pct)2023-07-19
High vulnerability · 2023-07-19
CVE-2023-3466
Patch
CWE-20
High · CVSS 8.3
EPSS 1.2% (79th pct)2023-07-19
Critical vulnerability · 2023-07-19
CVE-2023-3519
CISA KEV
Public exploit
Patch
CWE-94
Added to CISA KEV 2023-07-19
Critical · CVSS 9.3
EPSS 93.5% (100th pct)2023-07-19
Vulnerability · 2021-08-05
CVE-2021-22919
Patch
CWE-770
Unscored
EPSS 0.5% (67th pct)2021-08-05
Vulnerability · 2021-08-05
CVE-2021-22927
Patch
CWE-384
Unscored
EPSS 0.3% (51th pct)2021-08-05
Vulnerability · 2021-06-16
CVE-2020-8299
Patch
CWE-400
Unscored
EPSS 0.3% (55th pct)2021-06-16
Vulnerability · 2021-06-16
CVE-2020-8300
Patch
CWE-284
Unscored
EPSS 14.9% (95th pct)2021-06-16
Vulnerability · 2020-09-18
CVE-2020-8247
Patch
CWE-269
Unscored
EPSS 0.4% (58th pct)2020-09-18
Vulnerability · 2020-09-18
CVE-2020-8246
Patch
CWE-400
Unscored
EPSS 0.5% (67th pct)2020-09-18
Vulnerability · 2020-09-18
CVE-2020-8245
Patch
CWE-79
Unscored
EPSS 0.4% (60th pct)2020-09-18
Vulnerability · 2020-07-10
CVE-2020-8197
Patch
Unscored
EPSS 0.7% (73th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8198
Patch
CWE-79
Unscored
EPSS 0.4% (60th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8194
Patch
CWE-94
Unscored
EPSS 81.1% (99th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8191
Patch
CWE-79
Unscored
EPSS 91.0% (100th pct)2020-07-10
Vulnerability · 2020-07-10
CVE-2020-8187
Patch
CWE-20
Unscored
EPSS 1.1% (79th pct)2020-07-10

Showing 30 of 43

Common weakness types

The CWE weakness categories most often found in citrix netscaler gateway CVEs. Follow any weakness for its full explanation.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer7 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-1284Improper Validation of Specified Quantity in Input2 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-125Out-of-bounds Read2 CVEs
CWE-20Improper Input Validation2 CVEs

Disclosure activity by year

How many citrix netscaler gateway CVEs were published each year.

2016

2

2017

2

2018

4

2019

4

2020

9

2021

4

2023

5

2024

6

2025

6

2026

1

Other citrix products

Browse vulnerabilities for other products by citrix.

hypervisor62 CVEs xenserver51 CVEs netscaler application delivery controller32 CVEs netscaler gateway firmware31 CVEs application delivery controller firmware30 CVEs netscaler application delivery controller firmware29 CVEs application delivery controller27 CVEs gateway27 CVEs

All citrix vulnerabilities

Frequently asked questions

Common questions about citrix netscaler gateway vulnerabilities.

How many CVEs does citrix netscaler gateway have?

citrix netscaler gateway has 43 published CVE records since 2016.

How many citrix netscaler gateway CVEs are in CISA KEV?

Yes — 9 of citrix netscaler gateway's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for citrix netscaler gateway vulnerabilities?

Yes — 9 of citrix netscaler gateway's CVEs have a known public exploit.

Which versions of citrix netscaler gateway are affected?

29 distinct citrix netscaler gateway versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in citrix netscaler gateway CVEs?

citrix netscaler gateway's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-94 (Improper Control of Generation of Code ('Code Injection')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-1284 (Improper Validation of Specified Quantity in Input).

How many critical citrix netscaler gateway vulnerabilities are there?

citrix netscaler gateway has 7 critical and 10 high-severity CVEs.

What is the average severity of citrix netscaler gateway CVEs?

The average CVSS base score across citrix netscaler gateway's scored CVEs is 8.4.

References

All citrix vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track citrix netscaler gateway vulnerabilities

Monitor new citrix netscaler gateway vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References