CVE-2023-4966Critical· 9.4▾ Hadal⚠ Exploited in the wildPoC availableSensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
▾ Hadal zone — Critical and actively exploited (CISA KEV / 0day)
impact 51.7 · likelihood 20 · exploitation 25 · ransomware 5
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 3 sources. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 31.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Federal remediation due Nov 8, 2023
Last analysed / modified upstream
100%
14 GitHub repos · Metasploit ×1 · Nuclei ×1
Added to the CISA catalog on Oct 18, 2023. Federal remediation due Nov 8, 2023. View catalog ↗
Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
netscaler_application_delivery_controller >= 12.1, < 12.1-55.300netscaler_application_delivery_controller >= 13.0, < 13.0-92.19netscaler_application_delivery_controller >= 13.1, < 13.1-37.164netscaler_application_delivery_controller >= 13.1, < 13.1-49.15netscaler_application_delivery_controller >= 14.1, < 14.1-8.50netscaler_gateway >= 13.0, < 13.0-92.19netscaler_gateway >= 13.1, < 13.1-49.15netscaler_gateway >= 14.1, < 14.1-8.50Upgrade past the affected range:
netscaler_application_delivery_controller 14.1-8.50netscaler_gateway 14.1-8.50Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-88779High· 7.5Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
CVE-2026-88772High· 8.1Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-…
CVE-2026-88771Critical· 9.8Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 1…
CVE-2026-88777Critical· 9.8Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: befo…
CVE-2026-88776Critical· 9.8Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: befor…
CVE-2026-19490Critical· 9.8Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.