# Citrix security incidents · pwn.watch

> Security incidents tagged Citrix (vendor, product, platform or attack type).

Page: https://pwn.watch/t/citrix · generated 2026-10-22T18:10:31.291Z

## Status (as of 2026-10-22)
- Incidents: 13 (1 live, 0 live and not fully patched, 13 patched)
- Days without a Citrix security incident: 18
- Newest incident started: 2026-10-04

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/citrix.json
- RSS (one item per incident, bumped on each update): https://pwn.watch/t/citrix/feed.xml
- This file: https://pwn.watch/t/citrix/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-88779) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-88779.json)): high, live, patched, started 2026-10-04, CVE-2026-88779
- [Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-19490) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-19490.json)): high, closed, patched, started 2026-09-09, CVE-2026-19490
- [Citrix NetScaler: Citrix NetScaler Out-of-Bounds Read Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-3055) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-3055.json)): high, closed, patched, started 2026-03-30, CVE-2026-3055
- [Citrix NetScaler: NetScaler Memory Overflow Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2025-7775) ([json](https://pwn.watch/i/citrix-netscaler-cve-2025-7775.json)): critical, closed, patched, started 2025-08-26, CVE-2025-7775
- [Citrix Session Recording: 2 exploited vulnerabilities (CVE-2024-8068, CVE-2024-8069)](https://pwn.watch/i/citrix-session-recording-cve-2024-8068) ([json](https://pwn.watch/i/citrix-session-recording-cve-2024-8068.json)): medium, closed, patched, started 2025-08-25, CVE-2024-8068, CVE-2024-8069
- [Citrix NetScaler ADC and Gateway: NetScaler ADC and Gateway Buffer Overflow Vulnerability](https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543) ([json](https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543.json)): critical, closed, patched, started 2025-06-30, CVE-2025-6543
- [CitrixBleed 2: NetScaler memory leak exploited to hijack sessions](https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777) ([json](https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777.json)): critical, closed, patched, started 2025-06-17, CVE-2025-5777
- [Change Healthcare ransomware attack (ALPHV/BlackCat)](https://pwn.watch/i/change-healthcare-ransomware-attack) ([json](https://pwn.watch/i/change-healthcare-ransomware-attack.json)): critical, closed, no-fix-needed, started 2024-02-21
- [Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities](https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549) ([json](https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549.json)): high, closed, patched, started 2024-01-17, CVE-2023-6548, CVE-2023-6549
- [Xfinity breach via Citrix Bleed: 35.9M customers](https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023) ([json](https://pwn.watch/i/xfinity-citrix-bleed-data-breach-2023.json)): high, closed, patched, started 2023-10-16
- [Citrix Bleed: NetScaler session token leak (CVE-2023-4966)](https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966) ([json](https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966.json)): critical, closed, patched, started 2023-10-10, CVE-2023-4966
- [Citrix Content Collaboration: ShareFile Improper Access Control (CVE-2023-24489)](https://pwn.watch/i/citrix-content-collaboration-cve-2023-24489) ([json](https://pwn.watch/i/citrix-content-collaboration-cve-2023-24489.json)): critical, closed, patched, started 2023-08-16, CVE-2023-24489
- [NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)](https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519) ([json](https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519.json)): critical, closed, patched, started 2023-07-18, CVE-2023-3519