# NetScaler security incidents · pwn.watch

> Security incidents tagged NetScaler (vendor, product, platform or attack type).

Page: https://pwn.watch/t/netscaler · generated 2026-10-22T16:42:00.965Z

## Status (as of 2026-10-22)
- Incidents: 9 (1 live, 0 live and not fully patched, 9 patched)
- Days without a NetScaler security incident: 18
- Newest incident started: 2026-10-04

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/netscaler.json
- RSS (every update): https://pwn.watch/t/netscaler/feed.xml
- This file: https://pwn.watch/t/netscaler/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Citrix NetScaler: Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-88779) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-88779.json)): high, live, patched, started 2026-10-04, CVE-2026-88779
- [Citrix NetScaler: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-19490) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-19490.json)): high, closed, patched, started 2026-09-09, CVE-2026-19490
- [Citrix NetScaler: Citrix NetScaler Out-of-Bounds Read Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2026-3055) ([json](https://pwn.watch/i/citrix-netscaler-cve-2026-3055.json)): high, closed, patched, started 2026-03-30, CVE-2026-3055
- [Citrix NetScaler: NetScaler Memory Overflow Vulnerability](https://pwn.watch/i/citrix-netscaler-cve-2025-7775) ([json](https://pwn.watch/i/citrix-netscaler-cve-2025-7775.json)): critical, closed, patched, started 2025-08-26, CVE-2025-7775
- [Citrix NetScaler ADC and Gateway: NetScaler ADC and Gateway Buffer Overflow Vulnerability](https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543) ([json](https://pwn.watch/i/citrix-netscaler-adc-and-gateway-cve-2025-6543.json)): critical, closed, patched, started 2025-06-30, CVE-2025-6543
- [CitrixBleed 2: NetScaler memory leak exploited to hijack sessions](https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777) ([json](https://pwn.watch/i/citrixbleed-2-netscaler-cve-2025-5777.json)): critical, closed, patched, started 2025-06-17, CVE-2025-5777
- [Citrix NetScaler ADC and NetScaler Gateway: 2 actively exploited vulnerabilities](https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549) ([json](https://pwn.watch/i/citrix-netscaler-adc-and-netscaler-gatew-cve-2023-6548-6549.json)): high, closed, patched, started 2024-01-17, CVE-2023-6548, CVE-2023-6549
- [Citrix Bleed: NetScaler session token leak (CVE-2023-4966)](https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966) ([json](https://pwn.watch/i/citrix-bleed-netscaler-cve-2023-4966.json)): critical, closed, patched, started 2023-10-10, CVE-2023-4966
- [NetScaler ADC/Gateway unauthenticated RCE (CVE-2023-3519)](https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519) ([json](https://pwn.watch/i/citrix-netscaler-rce-cve-2023-3519.json)): critical, closed, patched, started 2023-07-18, CVE-2023-3519