Is itCheck something

Attack list

Citrix

27 attacked bugs

Yes. Attackers are using Citrix bugs right now.

What to do

Ask whoever runs it (your web host or IT team) to install the vendor's latest security update now.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. A crafted request can knock Citrix NetScaler offlineCVE-2026-88779Oct 4, 2026
  2. Citrix NetScaler flaw can crash or let attackers take overCVE-2026-88772Sep 27, 2026
  3. Attackers can run commands on Citrix NetScaler before loginCVE-2026-88771Sep 27, 2026
  4. Citrix NetScaler bug: authentication bypass using an alternate path or channelCVE-2026-19490Sep 9, 2026
  5. Citrix NetScaler ADC and NetScaler Gateway bug: and netscaler gateway improper restriction of operations within the bounds of a memory bufferCVE-2026-8452Aug 26, 2026
  6. Citrix NetScaler bug: out-of-bounds readCVE-2026-3055Mar 30, 2026
  7. Citrix NetScaler bug: memory overflowCVE-2025-7775Aug 26, 2025
  8. Citrix Session Recording bug: recording improper privilege managementCVE-2024-8068Aug 25, 2025
  9. Citrix Session Recording bug: recording deserialization of untrusted dataCVE-2024-8069Aug 25, 2025
  10. Citrix NetScaler ADC and Gateway bug: and gateway out-of-bounds readCVE-2025-5777Jul 10, 2025
  11. Citrix NetScaler ADC and Gateway bug: and gateway buffer overflowCVE-2025-6543Jun 30, 2025
  12. Citrix NetScaler ADC and NetScaler Gateway bug: and netscaler gateway buffer overflowCVE-2023-6549Jan 17, 2024
  13. Citrix NetScaler ADC and NetScaler Gateway bug: and netscaler gateway code injectionCVE-2023-6548Jan 17, 2024
  14. Citrix NetScaler ADC and NetScaler Gateway bug: and netscaler gateway buffer overflowCVE-2023-4966Oct 18, 2023
  15. Citrix Content Collaboration bug: collaboration sharefile improper access controlCVE-2023-24489Aug 16, 2023
  16. Citrix NetScaler ADC and NetScaler Gateway bug: and netscaler gateway code injectionCVE-2023-3519Jul 19, 2023
  17. Citrix Application Delivery Controller (ADC) and Gateway bug: controller (adc) and gateway authentication bypassCVE-2022-27518Dec 13, 2022
  18. Citrix ShareFile bug: improper access controlCVE-2021-22941Mar 25, 2022
  19. Citrix SD-WAN and NetScaler bug: netscaler command injectionCVE-2019-12991Mar 25, 2022
  20. Citrix SD-WAN and NetScaler bug: netscaler SQL injectionCVE-2019-12989Mar 25, 2022
  21. Citrix NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server bug: remote code executionCVE-2017-6316Mar 25, 2022
  22. Citrix StoreFront Server bug: xml external entity (XXE) processingCVE-2019-13608Nov 3, 2021
  23. Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance bug: adc, gateway, and sd-wan wanop appliance authorization bypassCVE-2020-8193Nov 3, 2021
  24. Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance bug: adc, gateway, and sd-wan wanop appliance information disclosureCVE-2020-8195Nov 3, 2021
  25. Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance bug: adc, gateway, and sd-wan wanop appliance information disclosureCVE-2020-8196Nov 3, 2021
  26. Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance bug: adc, gateway, and sd-wan wanop appliance code executionCVE-2019-19781Nov 3, 2021
  27. Citrix Workspace Application and Receiver for Windows bug: application and receiver for windows remote code executionCVE-2019-11634Nov 3, 2021

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.