Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

Citrix

Products: Citrix ShareFile Storage Zones Controller · NetScaler ADC · NetScaler Gateway

245.4

Score

7

CVEs

7

Active

0

PoC

7

KEV

#10

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2026-3055	2026-03-23	9.3v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
CVE-2025-7775	2025-08-26	9.2v4.0	ACTIVE		High	None	no	26.0	NetScaler ADCNetScaler Gateway	Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC and NetScaler Gateway 13.1, 14.1, 13.1-FI
CVE-2025-6543	2025-06-25	9.2v4.0	ACTIVE		High	None	no	26.0	NetScaler ADCNetScaler Gateway	Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2025-5777	2025-06-17	9.3v4.0	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2023-4966	2023-10-10	9.4v3.1	ACTIVE		Low	None	YES	40.6	NetScaler ADCNetScaler Gateway	Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.
CVE-2023-3519	2023-07-19	9.8v3.1	ACTIVE		Low	None	no	31.2	NetScaler ADCNetScaler Gateway	Unauthenticated remote code execution
CVE-2023-24489	2023-07-10	9.8v3.1	ACTIVE		Low	None	YES	40.6	Citrix ShareFile Storage Zones Controller	A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed ShareFile storage zones controller.

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3