{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T16:42:00.965Z",
  "tag": {
    "id": "netscaler",
    "label": "NetScaler",
    "isStack": false,
    "url": "https://pwn.watch/t/netscaler",
    "feed": "https://pwn.watch/t/netscaler/feed.xml"
  },
  "counts": {
    "incidents": 9,
    "live": 1,
    "notFullyPatched": 0,
    "patched": 9
  },
  "incidents": [
    {
      "slug": "citrix-netscaler-cve-2026-88779",
      "title": "Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2026-88779",
      "json": "https://pwn.watch/i/citrix-netscaler-cve-2026-88779.json",
      "status": "live",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Citrix NetScaler",
      "tags": [
        "citrix",
        "netscaler",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-88779"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-10-04",
      "closedAt": null,
      "updatedAt": "2026-10-04",
      "summary": "Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service. Added to CISA KEV on 2026-10-04.",
      "xPost": null
    },
    {
      "slug": "citrix-netscaler-cve-2026-19490",
      "title": "Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability",
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2026-19490",
      "json": "https://pwn.watch/i/citrix-netscaler-cve-2026-19490.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Citrix NetScaler",
      "tags": [
        "citrix",
        "netscaler",
        "cisa-kev",
        "auth-bypass"
      ],
      "cveIds": [
        "CVE-2026-19490"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-09-09",
      "closedAt": "2026-09-09",
      "updatedAt": "2026-09-09",
      "summary": "Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication. Added to CISA KEV on 2026-09-09.",
      "xPost": null
    },
    {
      "slug": "citrix-netscaler-cve-2026-3055",
      "title": "Citrix NetScaler: Citrix NetScaler Out-of-Bounds Read Vulnerability",
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2026-3055",
      "json": "https://pwn.watch/i/citrix-netscaler-cve-2026-3055.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Citrix NetScaler",
      "tags": [
        "citrix",
        "netscaler",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2026-3055"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2026-03-30",
      "closedAt": "2026-03-30",
      "updatedAt": "2026-03-30",
      "summary": "Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread. Added to CISA KEV on 2026-03-30.",
      "xPost": null
    },
    {
      "slug": "citrix-netscaler-cve-2025-7775",
      "title": "Citrix NetScaler: NetScaler Memory Overflow Vulnerability",
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2025-7775",
      "json": "https://pwn.watch/i/citrix-netscaler-cve-2025-7775.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Citrix NetScaler",
      "tags": [
        "citrix",
        "netscaler",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2025-7775"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-08-26",
      "closedAt": "2025-08-26",
      "updatedAt": "2025-08-26",
      "summary": "Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that could allow for remote code execution and/or denial of service. Added to CISA KEV on 2025-08-26.",
      "xPost": null
    },
    {
      "slug": "citrix-netscaler-adc-and-gateway-cve-2025-6543",
      "title": "Citrix NetScaler ADC and Gateway: NetScaler ADC and Gateway Buffer Overflow Vulnerability",
      "url": "https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543",
      "json": "https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Citrix NetScaler ADC and Gateway",
      "tags": [
        "citrix",
        "netscaler",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-6543"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-06-30",
      "closedAt": "2025-06-30",
      "updatedAt": "2025-06-30",
      "summary": "Citrix NetScaler ADC and Gateway contain a buffer overflow vulnerability leading to unintended control flow and Denial of Service. NetScaler must be configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server. Added to CISA KEV on 2025-06-30.",
      "xPost": null
    },
    {
      "slug": "citrixbleed-2-netscaler-cve-2025-5777",
      "title": "CitrixBleed 2: NetScaler memory leak exploited to hijack sessions",
      "url": "https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777",
      "json": "https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Citrix NetScaler ADC and Gateway",
      "tags": [
        "citrixbleed",
        "citrix",
        "netscaler",
        "zero-day",
        "cisa-kev",
        "ransomware"
      ],
      "cveIds": [
        "CVE-2025-5777"
      ],
      "affectedVersions": [
        "See Citrix bulletin"
      ],
      "fixedVersions": [
        "14.1-43.56",
        "13.1-58.32",
        "13.1-FIPS/NDcPP 13.1-37.235"
      ],
      "startedAt": "2025-06-17",
      "closedAt": "2025-07-10",
      "updatedAt": "2025-07-10",
      "summary": "An out-of-bounds read in NetScaler ADC and Gateway leaked memory, including session tokens, to unauthenticated attackers. GreyNoise saw exploitation from June 23, before public PoCs on July 4. After patching, admins had to kill all active ICA, PCoIP, RDP, AAA and LB sessions.",
      "xPost": null
    },
    {
      "slug": "citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549",
      "title": "Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities",
      "url": "https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549",
      "json": "https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Citrix NetScaler ADC and NetScaler Gateway",
      "tags": [
        "citrix",
        "netscaler",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2023-6548",
        "CVE-2023-6549"
      ],
      "affectedVersions": [
        "See vendor advisory (versions are not listed in the KEV record)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2024-01-17",
      "closedAt": "2024-01-17",
      "updatedAt": "2024-01-17",
      "summary": "CVE-2023-6548: Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP. CVE-2023-6549: Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for a denial-of-service when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server. Added to the CISA KEV catalog on 2024-01-17. CVE-2023-6548, CVE-2023-6549 were assigned before 2024; the KEV listing came in 2024.",
      "xPost": null
    },
    {
      "slug": "citrix-bleed-netscaler-cve-2023-4966",
      "title": "Citrix Bleed: NetScaler session token leak (CVE-2023-4966)",
      "url": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966",
      "json": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Citrix NetScaler ADC and NetScaler Gateway",
      "tags": [
        "citrix",
        "netscaler",
        "zero-day",
        "session-hijacking",
        "lockbit",
        "ransomware",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-4966"
      ],
      "affectedVersions": [
        "NetScaler ADC and Gateway configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (NVD); exact builds: see vendor advisory"
      ],
      "fixedVersions": [
        "14.1-8.50",
        "13.1-49.15",
        "13.0-92.19",
        "FIPS/NDcPP builds: see vendor advisory"
      ],
      "startedAt": "2023-10-10",
      "closedAt": "2023-11-21",
      "updatedAt": "2023-12-18",
      "summary": "A memory leak in NetScaler ADC and Gateway let attackers read session tokens and hijack logged-in sessions, bypassing passwords and MFA. It was exploited as a zero-day from late August 2023, then widely by LockBit affiliates. Victims included Xfinity (35.9M users).",
      "xPost": null
    },
    {
      "slug": "citrix-netscaler-rce-cve-2023-3519",
      "title": "NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)",
      "url": "https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519",
      "json": "https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Citrix NetScaler ADC and NetScaler Gateway",
      "tags": [
        "citrix",
        "netscaler",
        "zero-day",
        "rce",
        "webshell",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2023-3519"
      ],
      "affectedVersions": [
        "NetScaler ADC and Gateway configured as a Gateway or AAA virtual server; exact builds: see vendor advisory"
      ],
      "fixedVersions": [
        "13.1-49.13",
        "13.0-91.13",
        "FIPS/NDcPP builds: see vendor advisory"
      ],
      "startedAt": "2023-07-18",
      "closedAt": "2023-07-20",
      "updatedAt": "2023-07-20",
      "summary": "An unauthenticated code injection in NetScaler ADC and Gateway was exploited as a zero-day to plant webshells, including on a US critical infrastructure organisation in June 2023. Citrix patched it on July 18, 2023.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "citrix-netscaler-cve-2026-88779",
      "incidentTitle": "Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability",
      "severity": "high",
      "status": "live",
      "patchStatus": "patched",
      "date": "2026-10-04",
      "title": "CISA added CVE-2026-88779 to the KEV catalog (due 2026-10-07).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2026-88779"
    },
    {
      "incident": "citrix-netscaler-cve-2026-19490",
      "incidentTitle": "Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-09-09",
      "title": "CISA added CVE-2026-19490 to the KEV catalog (due 2026-09-12).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2026-19490"
    },
    {
      "incident": "citrix-netscaler-cve-2026-3055",
      "incidentTitle": "Citrix NetScaler: Citrix NetScaler Out-of-Bounds Read Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2026-03-30",
      "title": "CISA added CVE-2026-3055 to the KEV catalog (due 2026-04-02).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2026-3055"
    },
    {
      "incident": "citrix-netscaler-cve-2025-7775",
      "incidentTitle": "Citrix NetScaler: NetScaler Memory Overflow Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-08-26",
      "title": "CISA added CVE-2025-7775 to the KEV catalog (due 2025-08-28).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrix-netscaler-cve-2025-7775"
    },
    {
      "incident": "citrixbleed-2-netscaler-cve-2025-5777",
      "incidentTitle": "CitrixBleed 2: NetScaler memory leak exploited to hijack sessions",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-10",
      "title": "CISA adds CVE-2025-5777 to KEV",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777"
    },
    {
      "incident": "citrixbleed-2-netscaler-cve-2025-5777",
      "incidentTitle": "CitrixBleed 2: NetScaler memory leak exploited to hijack sessions",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-07-04",
      "title": "watchTowr publishes technical analysis; public PoCs follow",
      "body": null,
      "sourceUrl": "https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777/",
      "url": "https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777"
    },
    {
      "incident": "citrix-netscaler-adc-and-gateway-cve-2025-6543",
      "incidentTitle": "Citrix NetScaler ADC and Gateway: NetScaler ADC and Gateway Buffer Overflow Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-30",
      "title": "CISA added CVE-2025-6543 to the KEV catalog (due 2025-07-21).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543"
    },
    {
      "incident": "citrixbleed-2-netscaler-cve-2025-5777",
      "incidentTitle": "CitrixBleed 2: NetScaler memory leak exploited to hijack sessions",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-26",
      "title": "ReliaQuest reports likely targeted exploitation",
      "body": null,
      "sourceUrl": "https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices/",
      "url": "https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777"
    },
    {
      "incident": "citrixbleed-2-netscaler-cve-2025-5777",
      "incidentTitle": "CitrixBleed 2: NetScaler memory leak exploited to hijack sessions",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-23",
      "title": "GreyNoise observes exploitation starting",
      "body": null,
      "sourceUrl": "https://www.greynoise.io/blog/exploitation-citrixbleed-2-cve-2025-5777-before-public-poc",
      "url": "https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777"
    },
    {
      "incident": "citrixbleed-2-netscaler-cve-2025-5777",
      "incidentTitle": "CitrixBleed 2: NetScaler memory leak exploited to hijack sessions",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-06-17",
      "title": "Citrix discloses CVE-2025-5777 and releases fixes",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777"
    },
    {
      "incident": "citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549",
      "incidentTitle": "Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-17",
      "title": "CVE-2023-6548 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-6548",
      "url": "https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549"
    },
    {
      "incident": "citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549",
      "incidentTitle": "Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-17",
      "title": "CVE-2023-6549 published",
      "body": null,
      "sourceUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-6549",
      "url": "https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549"
    },
    {
      "incident": "citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549",
      "incidentTitle": "Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-17",
      "title": "CISA added CVE-2023-6548 to the KEV catalog (federal deadline 2024-01-24)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549"
    },
    {
      "incident": "citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549",
      "incidentTitle": "Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2024-01-17",
      "title": "CISA added CVE-2023-6549 to the KEV catalog (federal deadline 2024-02-07)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "url": "https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549"
    },
    {
      "incident": "citrix-bleed-netscaler-cve-2023-4966",
      "incidentTitle": "Citrix Bleed: NetScaler session token leak (CVE-2023-4966)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-12-18",
      "title": "Xfinity discloses that Citrix Bleed exploitation on Oct 16–19 exposed data on 35.9M customers",
      "body": null,
      "sourceUrl": "https://www.theverge.com/2023/12/18/24007082/xfinity-data-breach-hack-notice-citrix",
      "url": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966"
    },
    {
      "incident": "citrix-bleed-netscaler-cve-2023-4966",
      "incidentTitle": "Citrix Bleed: NetScaler session token leak (CVE-2023-4966)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-11-21",
      "title": "CISA, FBI, MS-ISAC and ACSC warn that LockBit 3.0 affiliates are exploiting Citrix Bleed (AA23-325A)",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-325a",
      "url": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966"
    },
    {
      "incident": "citrix-bleed-netscaler-cve-2023-4966",
      "incidentTitle": "Citrix Bleed: NetScaler session token leak (CVE-2023-4966)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-23",
      "title": "Citrix issues additional mitigation guidance",
      "body": null,
      "sourceUrl": "https://assets.xfinity.com/assets/dotcom/learn/Notice%20To%20Customers%20of%20Data%20Security%20Incident.pdf",
      "url": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966"
    },
    {
      "incident": "citrix-bleed-netscaler-cve-2023-4966",
      "incidentTitle": "Citrix Bleed: NetScaler session token leak (CVE-2023-4966)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-18",
      "title": "CISA adds CVE-2023-4966 to the KEV catalog",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966"
    },
    {
      "incident": "citrix-bleed-netscaler-cve-2023-4966",
      "incidentTitle": "Citrix Bleed: NetScaler session token leak (CVE-2023-4966)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-17",
      "title": "Mandiant reports zero-day exploitation since late August 2023 and session hijacking that survives patching",
      "body": null,
      "sourceUrl": "https://cloud.google.com/blog/topics/threat-intelligence/session-hijacking-citrix-cve-2023-4966",
      "url": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966"
    },
    {
      "incident": "citrix-bleed-netscaler-cve-2023-4966",
      "incidentTitle": "Citrix Bleed: NetScaler session token leak (CVE-2023-4966)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-10-10",
      "title": "Citrix publishes bulletin CTX579459 and fixed builds",
      "body": null,
      "sourceUrl": "https://support.citrix.com/external/article/CTX579459/netscaler-adc-and-netscaler-gateway-secu.html",
      "url": "https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966"
    },
    {
      "incident": "citrix-netscaler-rce-cve-2023-3519",
      "incidentTitle": "NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-07-20",
      "title": "CISA advisory AA23-201A: webshell dropped on a critical infrastructure organisation's NetScaler in June 2023",
      "body": null,
      "sourceUrl": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-201a",
      "url": "https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519"
    },
    {
      "incident": "citrix-netscaler-rce-cve-2023-3519",
      "incidentTitle": "NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-07-19",
      "title": "CISA adds CVE-2023-3519 to the KEV catalog",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519"
    },
    {
      "incident": "citrix-netscaler-rce-cve-2023-3519",
      "incidentTitle": "NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2023-07-18",
      "title": "Citrix publishes CTX561482 and fixed builds; exploits seen on unmitigated appliances",
      "body": null,
      "sourceUrl": "https://support.citrix.com/external/article/CTX561482/citrix-adc-and-citrix-gateway-security-b.html",
      "url": "https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519"
    }
  ]
}