# cve.now: Citrix

The newest entries affecting Citrix (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-53564](https://cve.now/CVE-2026-53564.md): Arbitrary file read and write (CVSS 5.1, Citrix UniconOS)
- [CVE-2026-53563](https://cve.now/CVE-2026-53563.md): Persistent Command Execution (CVSS 6.9, Citrix UniconOS)
- [CVE-2026-84419](https://cve.now/CVE-2026-84419.md): Out-of-Bounds Write (CVSS 6.8, Citrix Workspace app for Windows)
- [CVE-2026-53562](https://cve.now/CVE-2026-53562.md): Local Privilege Escalation (CVSS 8.5, Citrix UniconOS)
- [CVE-2026-88778](https://cve.now/CVE-2026-88778.md): TCP Initial Sequence Number (ISN) prediction (CVSS 8.8, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-88777](https://cve.now/CVE-2026-88777.md): Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service (CVSS 8.8, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-88776](https://cve.now/CVE-2026-88776.md): Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service (CVSS 8.8, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-88775](https://cve.now/CVE-2026-88775.md): Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service (CVSS 8.8, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-88773](https://cve.now/CVE-2026-88773.md): HTTP Request Smuggling (CVSS 9.3, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-88774](https://cve.now/CVE-2026-88774.md): Feature policy bypass due to improper HTTP URL based expression usage (CVSS 7.0, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-88772](https://cve.now/CVE-2026-88772.md): Memory overflow vulnerability leading to Remote Code Execution or Denial of Service (CVSS 9.5, KEV, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-88771](https://cve.now/CVE-2026-88771.md): A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands (CVSS 9.5, KEV, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2026-78547](https://cve.now/CVE-2026-78547.md): Out-of-Bounds Write (CVSS 4.4, Citrix Workspace app for Windows)
- [CVE-2026-18751](https://cve.now/CVE-2026-18751.md): Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751 (CVSS 5.2, Citrix WorkSpace App)
- [CVE-2026-53566](https://cve.now/CVE-2026-53566.md): Out-of-bounds memory read (CVSS 6.8, Citrix Secure Access Client for Windows)
- [CVE-2026-53565](https://cve.now/CVE-2026-53565.md): Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 8.5, Citrix Secure Access Client for Windows · Citrix Endpoint A…)
- [CVE-2025-6759](https://cve.now/CVE-2025-6759.md): Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 7.3, Windows Virtual Delivery Agent for CVAD and Citrix DaaS)
- [CVE-2025-0320](https://cve.now/CVE-2025-0320.md): Citrix Secure Access - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 8.6, Citrix Secure Access Client for Windows)
- [CVE-2025-4879](https://cve.now/CVE-2025-4879.md): Citrix Workspace App for Windows - Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 7.3, Citrix Workspace App for Windows)
- [CVE-2025-1223](https://cve.now/CVE-2025-1223.md): An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data (CVSS 5.8, Citrix Secure Access Client for Mac)
- [CVE-2025-1222](https://cve.now/CVE-2025-1222.md): An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data (CVSS 5.8, Citrix Secure Access Client for Mac)
- [CVE-2024-8535](https://cve.now/CVE-2024-8535.md): Authenticated user can access unintended user capabilities (CVSS 5.8, NetScaler ADC · NetScaler Gateway)
- [CVE-2024-8534](https://cve.now/CVE-2024-8534.md): Memory safety vulnerability leading to memory corruption and Denial of Service (CVSS 8.4, NetSclaer NetScaler ADC · NetScaler Gateway)
- [CVE-2024-8069](https://cve.now/CVE-2024-8069.md): Limited remote code execution with privilege of a NetworkService Account access (CVSS 5.1, KEV, Citrix Session Recording)
- [CVE-2024-8068](https://cve.now/CVE-2024-8068.md): Privilege escalation to NetworkService Account access (CVSS 5.1, KEV, Citrix Session Recording)
- [CVE-2024-7890](https://cve.now/CVE-2024-7890.md): Local privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 5.4, Citrix Workspace app for Windows)
- [CVE-2024-7889](https://cve.now/CVE-2024-7889.md): Local privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 7.0, Citrix Workspace app for Windows)
- [CVE-2024-6677](https://cve.now/CVE-2024-6677.md): Privilege escalation in uberAgent (CVSS 7.3, Citrix uberAgent)
- [CVE-2024-6149](https://cve.now/CVE-2024-6149.md): Redirection of users to a vulnerable URL in Citrix Workspace app for HTML5 (CVSS 4.8, Citrix Workspace app for HTML5)
- [CVE-2024-6148](https://cve.now/CVE-2024-6148.md): Bypass of GACS Policy Configuration settings in Citrix Workspace app for HTML5 (CVSS 5.3, Citrix Workspace app for HTML5)
- [CVE-2024-6150](https://cve.now/CVE-2024-6150.md): A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning (CVSS 4.8, Citrix Provisioning)
- [CVE-2024-6286](https://cve.now/CVE-2024-6286.md): Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 8.5, Citrix Workspace app for Windows)
- [CVE-2024-6151](https://cve.now/CVE-2024-6151.md): Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges (CVSS 8.5, Citrix Windows Virtual Delivery Agent)
- [CVE-2024-6236](https://cve.now/CVE-2024-6236.md): Denial of Service (CVSS 7.1, NetSclaer NetScaler Console · NetScaler Agent +1)
- [CVE-2024-6235](https://cve.now/CVE-2024-6235.md): Sensitive information disclosure (CVSS 9.4, NetScaler Console)
- [CVE-2024-5492](https://cve.now/CVE-2024-5492.md): Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites (CVSS 5.1, NetSclaer NetScaler ADC)
- [CVE-2024-5491](https://cve.now/CVE-2024-5491.md): Denial of Service (CVSS 7.2, NetScaler ADC · NetScaler Gateway)
- [CVE-2024-5661](https://cve.now/CVE-2024-5661.md): Potential Denial of Service affecting XenServer and Citrix Hypervisor (CVSS 6.0, Citrix Hypervisor · Citrix XenServer)
- [CVE-2024-2049](https://cve.now/CVE-2024-2049.md): Server-Side Request Forgery (SSRF) (CVSS 6.5, Citrix SD-WAN Standard/Premium Editions)
- [CVE-2023-6184](https://cve.now/CVE-2023-6184.md): Cross SiteScripting vulnerability in Citrix Session Recording allows attacker to perform Cross Site Scripting (CVSS 5.0, Cloud Software Group Citrix Session Recording)
- [CVE-2023-5914](https://cve.now/CVE-2023-5914.md): Cross-site scripting (XSS) (CVSS 5.4, Cloud Software Group Citrix StoreFront)
- [CVE-2023-6549](https://cve.now/CVE-2023-6549.md): Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial (CVSS 8.2, KEV, Cloud Software Group NetScaler ADC)
- [CVE-2023-6548](https://cve.now/CVE-2023-6548.md): Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLI (CVSS 5.5, KEV, Cloud Software Group NetScaler ADC · Cloud Software Group N…)
- [CVE-2023-4967](https://cve.now/CVE-2023-4967.md): Denial of service (CVSS 8.2, Cloud Software Group NetScaler ADC · Cloud Software Group N…)
- [CVE-2023-4966](https://cve.now/CVE-2023-4966.md): Unauthenticated sensitive information disclosure (CVSS 9.4, KEV, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2023-3467](https://cve.now/CVE-2023-3467.md): Privilege Escalation to root administrator (nsroot) (CVSS 8.0, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2023-3466](https://cve.now/CVE-2023-3466.md): Reflected Cross-Site Scripting (XSS) (CVSS 8.3, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2023-3519](https://cve.now/CVE-2023-3519.md): Unauthenticated remote code execution (CVSS 9.8, KEV, Citrix NetScaler ADC · Citrix NetScaler Gateway)
- [CVE-2023-24492](https://cve.now/CVE-2023-24492.md): A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely (CVSS 9.6, Citrix Secure Access client for Ubuntu)
- [CVE-2023-24491](https://cve.now/CVE-2023-24491.md): A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with acc (CVSS 7.8, Citrix Secure Access client for Windows)
- [CVE-2023-24489](https://cve.now/CVE-2023-24489.md): A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthent (CVSS 9.8, KEV, Citrix ShareFile Storage Zones Controller)
- [CVE-2023-24490](https://cve.now/CVE-2023-24490.md): Users with only access to launch VDA applications can launch an unauthorized desktop (CVSS 6.3, Virtual Delivery Agents for Windows for CVAD and Citrix Daa…)
- [CVE-2023-24487](https://cve.now/CVE-2023-24487.md): Arbitrary file read (CVSS 6.3, Citrix ADC and Citrix Gateway)
- [CVE-2023-24488](https://cve.now/CVE-2023-24488.md): Cross site scripting (CVSS 6.1, Citrix ADC and Citrix Gateway)
- [CVE-2023-24486](https://cve.now/CVE-2023-24486.md): Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications (CVSS 5.5, Citrix Workspace app for Linux)
- [CVE-2023-24483](https://cve.now/CVE-2023-24483.md): Privilege Escalation to NT AUTHORITY\\SYSTEM on the vulnerable VDA (CVSS 7.8, Citrix Virtual Apps and Desktops)
- [CVE-2023-24484](https://cve.now/CVE-2023-24484.md): A malicious user can cause log files to be written to a directory that they do not have permission to write to. (CVSS 5.5, Citrix Workspace App for Windows)
- [CVE-2023-24485](https://cve.now/CVE-2023-24485.md): Privilege Escalation on the system running a vulnerable version of Citrix Workspace app for Windows (CVSS 7.8, Citrix Workspace App for Windows)
- [CVE-2022-27518](https://cve.now/CVE-2022-27518.md): Unauthenticated remote arbitrary code execution (CVSS 9.8, KEV, Citrix Gateway, Citrix ADC)
- [CVE-2022-27516](https://cve.now/CVE-2022-27516.md): User login brute force protection functionality bypass (CVSS 5.3, Citrix Gateway, Citrix ADC)
- [CVE-2022-27510](https://cve.now/CVE-2022-27510.md): Unauthorized access to Gateway user capabilities (CVSS 9.8, Citrix Gateway, Citrix ADC)
- [CVE-2022-27513](https://cve.now/CVE-2022-27513.md): Remote desktop takeover via phishing (CVSS 8.3, Citrix Gateway, Citrix ADC)
- [CVE-2022-27512](https://cve.now/CVE-2022-27512.md): Temporary disruption of the ADM license service (no CVSS, Citrix Application Delivery Management)
- [CVE-2022-27511](https://cve.now/CVE-2022-27511.md): Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator password (no CVSS, Citrix Application Delivery Management)
- [CVE-2022-27503](https://cve.now/CVE-2022-27503.md): Cross-site Scripting (XSS) vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9 (no CVSS, Citrix StoreFront)
- [CVE-2022-26355](https://cve.now/CVE-2022-26355.md): Citrix Federated Authentication Service (FAS) (no CVSS, Citrix Federated Authentication Service)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/citrix
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.