Citrix

Latest CVEs · RSS

• CVE-2026-53564 2026-10-13 · CVSS 5.1
  Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
• CVE-2026-53563 2026-10-13 · CVSS 6.9
  Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.
• CVE-2026-84420 2026-10-13 · CVSS 5.8
  Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTS
• CVE-2026-84419 2026-10-13 · CVSS 6.8
  Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix
• CVE-2026-53562 2026-10-13 · CVSS 8.5
  Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LT
• CVE-2026-78546 2026-09-11 · CVSS 4.8
  Out-of-bounds read vulnerability in Citirx Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.11 Current Release (CR), before
• CVE-2026-78547 2026-09-11 · CVSS 4.4
  Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Relea
• CVE-2026-18751 2026-08-18 · CVSS 5.2
  External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607.
• CVE-2026-53566 2026-07-14 · CVSS 6.8
  Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.2
• CVE-2026-53565 2026-07-14 · CVSS 8.5
  Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows. This issue affects
• CVE-2025-12101 2025-11-11 · CVSS 5.9
  Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy)
• CVE-2025-8424 2025-08-26 · CVSS 8.7
  Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Clus
• CVE-2025-7776 2025-08-26 · CVSS 8.8
  Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is conf
• CVE-2025-7775 2025-08-26 · CVSS 9.2
  Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as G
• CVE-2025-6759 2025-07-08 · CVSS 7.3
  Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Windows Virtual Delivery Agent for CVAD and Citrix DaaS
• CVE-2025-6543 2025-06-25 · CVSS 9.2
  Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN vi
• CVE-2025-0320 2025-06-17 · CVSS 8.6
  Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows
• CVE-2025-4879 2025-06-17 · CVSS 7.3
  Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Workspace app for Windows
• CVE-2025-4365 2025-06-17 · CVSS 6.9
  Arbitrary file read in NetScaler Console and NetScaler SDX (SVM)
• CVE-2025-5349 2025-06-17 · CVSS 8.7
  Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway
• CVE-2025-5777 2025-06-17 · CVSS 9.3
  Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA v
• CVE-2025-1223 2025-02-20 · CVSS 5.8
  An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac
• CVE-2025-1222 2025-02-20 · CVSS 5.8
  An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac
• CVE-2024-12284 2025-02-19 · CVSS 8.8
  Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.
• CVE-2024-8535 2024-11-12 · CVSS 5.8
  Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA