Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Citrix

Products: NetScaler ADC · NetScaler Gateway

173.7

Score

5

CVEs

5

Active

0

PoC

5

KEV

#12

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-3055	2026-03-23	9.3v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
CVE-2025-7775	2025-08-26	9.2v4.0	ACTIVE		High	None	no	26.0	NetScaler ADCNetScaler Gateway	Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FI
CVE-2025-6543	2025-06-25	9.2v4.0	ACTIVE		High	None	no	26.0	NetScaler ADCNetScaler Gateway	Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2025-5777	2025-06-17	9.3v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2023-4966	2023-10-10	9.4v3.1	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3