Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Citrix

Products: NetScaler ADC · NetScaler Gateway

254.8

Score

7

CVEs

7

Active

0

PoC

7

KEV

#11

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-88779	2026-10-04	8.7v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
CVE-2026-19490	2026-08-19	9.3v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
CVE-2026-8452	2026-06-30	8.8v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
CVE-2026-3055	2026-03-23	9.3v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
CVE-2025-7775	2025-08-26	9.2v4.0	ACTIVE		High	None	no	26.0	NetScaler ADCNetScaler Gateway	Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FI
CVE-2025-6543	2025-06-25	9.2v4.0	ACTIVE		High	None	no	26.0	NetScaler ADCNetScaler Gateway	Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2025-5777	2025-06-17	9.3v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3