Citrix Netscaler Application Delivery Controller
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Citrix Netscaler Application Delivery Controller.
By the Year
In 2026 there have been 0 vulnerabilities in Citrix Netscaler Application Delivery Controller. Last year, in 2025 Netscaler Application Delivery Controller had 3 security vulnerabilities published. Right now, Netscaler Application Delivery Controller is on track to have less security vulnerabilities in 2026 than it did last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 3 | 8.80 |
| 2024 | 6 | 7.25 |
| 2023 | 5 | 8.16 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 1 | 7.50 |
It may take a day or so for new Netscaler Application Delivery Controller vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Citrix Netscaler Application Delivery Controller Security Vulnerabilities
Citrix NetScaler ADC/Gateway Mem Overflow in Virtual Servers – DoS
CVE-2025-6543
- June 25, 2025
Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Buffer Overflow
Memory Overread in Citrix NetScaler Gateway
CVE-2025-5777
- June 17, 2025
Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
Out-of-bounds Read
NetScaler ADC/Gateway: Improper Access Control on Management Interface
CVE-2025-5349
8.8 - High
- June 17, 2025
Improper access control on the NetScaler Management Interface in NetScaler ADC?and NetScaler Gateway
CVE-2024-8535: NetScaler ADC/Gateway Unauthorized Capability Escalation via KCDAccount Kerberos SSO
CVE-2024-8535
8.1 - High
- November 12, 2024
Authenticated user can access unintended user capabilities in NetScaler ADC and NetScaler Gateway if the appliance must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) with KCDAccount configuration for Kerberos SSO to access backend resources OR the appliance must be configured as an Auth Server (AAA Vserver) with KCDAccount configuration for Kerberos SSO to access backend resources
Citrix NetScaler ADC/Gateway RDP-induced memory corruption DoS
CVE-2024-8534
8.1 - High
- November 12, 2024
Memory safety vulnerability leading to memory corruption and Denial of Service in NetScaler ADC and Gateway if the appliance must be configured as a Gateway (VPN Vserver) with RDP Feature enabled OR the appliance must be configured as a Gateway (VPN Vserver) and RDP Proxy Server Profile is created and set to Gateway (VPN Vserver) OR the appliance must be configured as a Auth Server (AAA Vserver) with RDP Feature enabled
Memory Corruption
Open Redirect in NetScaler ADC & Gateway Allows Arbitrary URL Redirection
CVE-2024-5492
6.1 - Medium
- July 10, 2024
Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway
CVE-2024-5491 DoS in Citrix NetScaler ADC/Gateway
CVE-2024-5491
7.5 - High
- July 10, 2024
Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler
Citrix NetScaler ADC/Gateway OOB Buffer Read DoS
CVE-2023-6549
8.2 - High
- January 17, 2024
Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory Read
Buffer Overflow
NetScaler ADC/Gateway Code Injection RCE via Management Interface
CVE-2023-6548
5.5 - Medium
- January 17, 2024
Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authenticated (low privileged) remote code execution on Management Interface.
Code Injection
DoS in Citrix NetScaler ADC & Gateway when Gateway Configured
CVE-2023-4967
7.5 - High
- October 27, 2023
Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server
Buffer Overflow
Citrix NetScaler ADC/Gateway Sensitive Info Disclosure
CVE-2023-4966
9.4 - Critical
- October 10, 2023
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtualserver.
Buffer Overflow
Privilege Escalation to root via nsroot (CVE20233467)
CVE-2023-3467
8 - High
- July 19, 2023
Privilege Escalation to root administrator (nsroot)
Unknown: Reflected XSS Vulnerability (CVE-2023-3466)
CVE-2023-3466
6.1 - Medium
- July 19, 2023
Reflected Cross-Site Scripting (XSS)
XSS
CVE-2023-3519: Unauth RCE in Unknown Product
CVE-2023-3519
9.8 - Critical
- July 19, 2023
Unauthenticated remote code execution
Code Injection
Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0
CVE-2018-5314
7.5 - High
- March 01, 2018
Command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53.13; and the NetScaler Load Balancing instance distributed with NetScaler SD-WAN/CloudBridge 4000, 4100, 5000 and 5100 WAN Optimization Edition 9.3.0 allows remote attackers to execute a system command or read arbitrary files via an SSH login prompt.
authentification
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Citrix Netscaler Application Delivery Controller or by Citrix? Click the Watch button to subscribe.
