https://pwn.watch/t/netscaler Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT https://pwn.watch/i/citrix-netscaler-cve-2026-88779 citrix-netscaler-cve-2026-88779:2026-10-04:CISA added CVE-2026-88779 to the KEV catalog (due 2026-10-07). Sun, 04 Oct 2026 00:00:00 GMT high Status: live, patched https://pwn.watch/i/citrix-netscaler-cve-2026-19490 citrix-netscaler-cve-2026-19490:2026-09-09:CISA added CVE-2026-19490 to the KEV catalog (due 2026-09-12). Wed, 09 Sep 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/citrix-netscaler-cve-2026-3055 citrix-netscaler-cve-2026-3055:2026-03-30:CISA added CVE-2026-3055 to the KEV catalog (due 2026-04-02). Mon, 30 Mar 2026 00:00:00 GMT high Status: closed, patched https://pwn.watch/i/citrix-netscaler-cve-2025-7775 citrix-netscaler-cve-2025-7775:2025-08-26:CISA added CVE-2025-7775 to the KEV catalog (due 2025-08-28). Tue, 26 Aug 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777 citrixbleed-2-netscaler-cve-2025-5777:2025-07-10:CISA adds CVE-2025-5777 to KEV Thu, 10 Jul 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777 citrixbleed-2-netscaler-cve-2025-5777:2025-07-04:watchTowr publishes technical analysis; public PoCs follow Fri, 04 Jul 2025 00:00:00 GMT critical Source: https://labs.watchtowr.com/how-much-more-must-we-bleed-citrix-netscaler-memory-disclosure-citrixbleed-2-cve-2025-5777/ Status: closed, patched https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543 citrix-netscaler-adc-and-gateway-cve-2025-6543:2025-06-30:CISA added CVE-2025-6543 to the KEV catalog (due 2025-07-21). Mon, 30 Jun 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777 citrixbleed-2-netscaler-cve-2025-5777:2025-06-26:ReliaQuest reports likely targeted exploitation Thu, 26 Jun 2025 00:00:00 GMT critical Source: https://reliaquest.com/blog/threat-spotlight-citrix-bleed-2-vulnerability-in-netscaler-adc-gateway-devices/ Status: closed, patched https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777 citrixbleed-2-netscaler-cve-2025-5777:2025-06-23:GreyNoise observes exploitation starting Mon, 23 Jun 2025 00:00:00 GMT critical Source: https://www.greynoise.io/blog/exploitation-citrixbleed-2-cve-2025-5777-before-public-poc Status: closed, patched https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777 citrixbleed-2-netscaler-cve-2025-5777:2025-06-17:Citrix discloses CVE-2025-5777 and releases fixes Tue, 17 Jun 2025 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549 citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549:2024-01-17:CVE-2023-6548 published Wed, 17 Jan 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2023-6548 Status: closed, patched https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549 citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549:2024-01-17:CVE-2023-6549 published Wed, 17 Jan 2024 00:00:00 GMT high Source: https://nvd.nist.gov/vuln/detail/CVE-2023-6549 Status: closed, patched https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549 citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549:2024-01-17:CISA added CVE-2023-6548 to the KEV catalog (federal deadline 2024-01-24) Wed, 17 Jan 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549 citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549:2024-01-17:CISA added CVE-2023-6549 to the KEV catalog (federal deadline 2024-02-07) Wed, 17 Jan 2024 00:00:00 GMT high Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 citrix-bleed-netscaler-cve-2023-4966:2023-12-18:Xfinity discloses that Citrix Bleed exploitation on Oct 16–19 exposed data on 35.9M customers Mon, 18 Dec 2023 00:00:00 GMT critical Source: https://www.theverge.com/2023/12/18/24007082/xfinity-data-breach-hack-notice-citrix Status: closed, patched https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 citrix-bleed-netscaler-cve-2023-4966:2023-11-21:CISA, FBI, MS-ISAC and ACSC warn that LockBit 3.0 affiliates are exploiting Citrix Bleed (AA23-325A) Tue, 21 Nov 2023 00:00:00 GMT critical Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-325a Status: closed, patched https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 citrix-bleed-netscaler-cve-2023-4966:2023-10-23:Citrix issues additional mitigation guidance Mon, 23 Oct 2023 00:00:00 GMT critical Source: https://assets.xfinity.com/assets/dotcom/learn/Notice%20To%20Customers%20of%20Data%20Security%20Incident.pdf Status: closed, patched https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 citrix-bleed-netscaler-cve-2023-4966:2023-10-18:CISA adds CVE-2023-4966 to the KEV catalog Wed, 18 Oct 2023 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 citrix-bleed-netscaler-cve-2023-4966:2023-10-17:Mandiant reports zero-day exploitation since late August 2023 and session hijacking that survives patching Tue, 17 Oct 2023 00:00:00 GMT critical Source: https://cloud.google.com/blog/topics/threat-intelligence/session-hijacking-citrix-cve-2023-4966 Status: closed, patched https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966 citrix-bleed-netscaler-cve-2023-4966:2023-10-10:Citrix publishes bulletin CTX579459 and fixed builds Tue, 10 Oct 2023 00:00:00 GMT critical Source: https://support.citrix.com/external/article/CTX579459/netscaler-adc-and-netscaler-gateway-secu.html Status: closed, patched https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519 citrix-netscaler-rce-cve-2023-3519:2023-07-20:CISA advisory AA23-201A: webshell dropped on a critical infrastructure organisation's NetScaler in June 2023 Thu, 20 Jul 2023 00:00:00 GMT critical Source: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-201a Status: closed, patched https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519 citrix-netscaler-rce-cve-2023-3519:2023-07-19:CISA adds CVE-2023-3519 to the KEV catalog Wed, 19 Jul 2023 00:00:00 GMT critical Status: closed, patched https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519 citrix-netscaler-rce-cve-2023-3519:2023-07-18:Citrix publishes CTX561482 and fixed builds; exploits seen on unmitigated appliances Tue, 18 Jul 2023 00:00:00 GMT critical Source: https://support.citrix.com/external/article/CTX561482/citrix-adc-and-citrix-gateway-security-b.html Status: closed, patched