Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-5777KEVexploit ×28 | 9.3 critical | 100.0% | citrix, netscaler_application_delivery_controller, netscaler_gateway | Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | 8 Oct |
| CVE-2026-19490KEVexploit ×5 | 9.3 critical | 33.0% | citrix, netscaler_application_delivery_controller, netscaler_gateway | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21. | Mon 26 Oct |
| CVE-2025-66391exploit | 8.8 high | 0.00% | no CPE yet | In Citrix Cloud through 2025-11-10, an account with read-only access can trigger the beginning of a workflow for write operations, e.g., the system will send a one-time password to an attacker-controlled email address when the attacker attempts to reset the password of a user account. | 12 Oct |
| CVE-2026-53562 | 8.5 high | 0.00% | no CPE yet | Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS. This issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2. | 14 Oct |
| CVE-2026-53563 | 6.9 medium | 0.00% | no CPE yet | Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. | 14 Oct |
| CVE-2026-53566 | 6.8 medium | 0.00% | no CPE yet | Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20. | Sat 24 Oct |
| CVE-2026-84419 | 6.8 medium | 0.00% | no CPE yet | Out-of-bounds write vulnerability in Citrix Workspace app for Windows. This issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1. | 15 Oct |
| CVE-2026-84420 | 5.8 medium | 0.00% | no CPE yet | Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.20 CR, before LTSR 2607, and before LTSR 2507 CU3. | 14 Oct |
| CVE-2026-18751 | 5.2 medium | 0.00% | no CPE yet | External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607. | Thu 22 Oct |
| CVE-2026-53564 | 5.1 medium | 0.00% | no CPE yet | Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. | 14 Oct |
10 of 10
Download these 10 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.