Vulnerabilità sfruttate
Citrix
27 vulnerabilità di Citrix nel catalogo KEV della CISA: quelle per cui l'agenzia statunitense per la sicurezza informatica ha prove di sfruttamento in attacchi reali.
Nel catalogo27
Ultimi 12 mesi6
In campagne ransomware7
Ultima aggiunta4 ottobre 2026
Le vulnerabilità27
- 4 ottobre 2026CVE-2026-88779NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- 27 settembre 2026CVE-2026-88772NetScalerCitrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- 27 settembre 2026CVE-2026-88771NetScalerCitrix NetScaler Improper Input Validation Vulnerability
- 9 settembre 2026CVE-2026-19490NetScalerCitrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
- 26 agosto 2026CVE-2026-8452NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
- 30 marzo 2026CVE-2026-3055NetScalerCitrix NetScaler Out-of-Bounds Read Vulnerability
- 26 agosto 2025CVE-2025-7775NetScalerCitrix NetScaler Memory Overflow Vulnerability
- 25 agosto 2025CVE-2024-8069Session RecordingCitrix Session Recording Deserialization of Untrusted Data Vulnerability
- 25 agosto 2025CVE-2024-8068Session RecordingCitrix Session Recording Improper Privilege Management Vulnerability
- 10 luglio 2025CVE-2025-5777NetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Out-of-Bounds Read VulnerabilityRansomware
- 30 giugno 2025CVE-2025-6543NetScaler ADC and GatewayCitrix NetScaler ADC and Gateway Buffer Overflow Vulnerability
- 17 gennaio 2024CVE-2023-6549NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability
- 17 gennaio 2024CVE-2023-6548NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
- 18 ottobre 2023CVE-2023-4966NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Buffer Overflow VulnerabilityRansomware
- 16 agosto 2023CVE-2023-24489Content CollaborationCitrix Content Collaboration ShareFile Improper Access Control Vulnerability
- 19 luglio 2023CVE-2023-3519NetScaler ADC and NetScaler GatewayCitrix NetScaler ADC and NetScaler Gateway Code Injection VulnerabilityRansomware
- 13 dicembre 2022CVE-2022-27518Application Delivery Controller (ADC) and GatewayCitrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
- 25 marzo 2022CVE-2021-22941ShareFileCitrix ShareFile Improper Access Control VulnerabilityRansomware
- 25 marzo 2022CVE-2019-12991SD-WAN and NetScalerCitrix SD-WAN and NetScaler Command Injection Vulnerability
- 25 marzo 2022CVE-2019-12989SD-WAN and NetScalerCitrix SD-WAN and NetScaler SQL Injection Vulnerability
- 25 marzo 2022CVE-2017-6316NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile ServerCitrix Multiple Products Remote Code Execution Vulnerability
- 3 novembre 2021CVE-2020-8196Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceCitrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
- 3 novembre 2021CVE-2020-8195Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceCitrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
- 3 novembre 2021CVE-2020-8193Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceCitrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability
- 3 novembre 2021CVE-2019-19781Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceCitrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution VulnerabilityRansomware
- 3 novembre 2021CVE-2019-13608StoreFront ServerCitrix StoreFront Server XML External Entity (XXE) Processing VulnerabilityRansomware
- 3 novembre 2021CVE-2019-11634Workspace Application and Receiver for WindowsCitrix Workspace Application and Receiver for Windows Remote Code Execution VulnerabilityRansomware
Dati: catalogo Known Exploited Vulnerabilities (KEV) della CISA, ultima aggiunta il 4 novembre 2026.
Il catalogo elenca solo le vulnerabilità con prove di sfruttamento, non tutte quelle del produttore.
Avvisi solo sui prodotti che usi
Con My Defence ricevi avvisi e briefing solo sui prodotti che usi, anche di Citrix.