Citrix CVEs, last 30 days (24 CVEs)
CVE Title CVSS Type Status CVE-2026-107412 Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service Pre-conditions: NetScaler is configured as a Gate... 9.5 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-120869 An unauthenticated attacker can bypass authentication controls to access restricted resources on the appliance Pre-conditions: Access to Citrix NetScaler Consol... 9.4 Improper Authentication Not exploited CVE-2026-120868 Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service. 9.3 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-107407 Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service. 9.3 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-107408 Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service. 9.3 Out-of-bounds Write Not exploited CVE-2026-107409 Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service. 9.3 Double Free Not exploited CVE-2026-107410 Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service. 9.3 Heap-based Buffer Overflow Not exploited CVE-2026-107415 Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service. 9.3 Heap-based Buffer Overflow Not exploited CVE-2026-120864 Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service. 9.3 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-107411 Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-107413 Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Heap-based Buffer Overflow Not exploited CVE-2026-107414 Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Heap-based Buffer Overflow Not exploited CVE-2026-111340 Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Stack-based Buffer Overflow Not exploited CVE-2026-111341 Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Classic Buffer Overflow Not exploited CVE-2026-111342 Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Classic Buffer Overflow Not exploited CVE-2026-120860 Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of ... 8.7 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-120861 Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Se... 8.7 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-120862 Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-120863 Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service Pre-conditions: An attacker on an untrusted host mu... 8.7 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-120865 Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-120867 Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service. 8.7 Improper Restriction of Operations within the Bounds of a Memory Buffer Not exploited CVE-2026-118269 Local Privilege Escalation: A low-privileged user can gain root privileges Pre-conditions: Standard user access on local system 8.5 Improper Privilege Management Not exploited CVE-2026-118268 Local Privilege Escalation: A low-privileged user can escalate privileges to SYSTEM Pre-conditions: Standard user access on local system 8.5 Improper Privilege Management Not exploited CVE-2026-120866 Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service. 7.7 Out-of-bounds Write Not exploited