Citrix NetScaler has 6 CVEs on record. Disclosure cadence is accelerating: 6 in the last 90 days against 0 in the 90 before. The busiest recent month was November 2026 with 6. The median CVSS is 9.3 (critical), with 6 rated critical. None have a confirmed exploitation report. Most affected products: ADC (5), Console (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.3
- Publish → KEV
- —
- Last 90 days
- 6 prev 0
Products
- ADC 5
- Console 1
Worst active — by depth score
CVE-2026-107410Critical· 9.3Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway51CVE-2026-107409Critical· 9.3Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway51CVE-2026-107408Critical· 9.3Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway51CVE-2026-107407Critical· 9.3Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway51CVE-2026-120869Critical· 9.3An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance51
Citrix NetScaler vulnerabilities
CVEs affecting Citrix NetScaler, newest first. Open any entry for full detail, references, and exploit status.
6 CVEsRSS
CVE-2026-107409Critical· 9.3Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway
Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway.
CVE-2026-107408Critical· 9.3Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.
CVE-2026-107410Critical· 9.3Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.
CVE-2026-107407Critical· 9.3Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.
CVE-2026-120868Critical· 9.3Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.
CVE-2026-120869Critical· 9.3An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
An unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance