Firewalls, VPNs and routers

Citrix security incident history

Updated Oct 26, 2026. Data gathered daily from official public sources.

As of Oct 26, 2026, Vendor History found 1 state breach notice and 27 actively exploited security flaws for Citrix, dated Apr 29, 2019 to Oct 4, 2026. The most recent breach notice or SEC filing was on Apr 29, 2019. Sources checked: the California and Washington Attorney General breach lists and CISA's Known Exploited Vulnerabilities catalog.

Breach notices and SEC cyber filings

1. Apr 29, 2019Breach notice

   Citrix Systems, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/13/2018.

   Source: California Attorney General

Got a breach letter from Citrix? What to do when a vendor has a data breach.

Actively exploited security flaws

Flaws in Citrix products that CISA lists as exploited by attackers. If you use an affected product, check that it's updated. What a listing means.

1. Oct 4, 2026Exploited flaw

   Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88779). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

2. Sep 27, 2026Exploited flaw

   Citrix NetScaler Improper Input Validation Vulnerability (CVE-2026-88771). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

3. Sep 27, 2026Exploited flaw

   Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-88772). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

4. Sep 9, 2026Exploited flaw

   Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVE-2026-19490). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

5. Aug 26, 2026Exploited flaw

   Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2026-8452). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

6. Mar 30, 2026Exploited flaw

   Citrix NetScaler Out-of-Bounds Read Vulnerability (CVE-2026-3055). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

7. Aug 26, 2025Exploited flaw

   Citrix NetScaler Memory Overflow Vulnerability (CVE-2025-7775). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

8. Aug 25, 2025Exploited flaw

   Citrix Session Recording Improper Privilege Management Vulnerability (CVE-2024-8068). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

9. Aug 25, 2025Exploited flaw

   Citrix Session Recording Deserialization of Untrusted Data Vulnerability (CVE-2024-8069). Added to CISA's list of security flaws known to be exploited by attackers.

   Source: CISA Known Exploited Vulnerabilities catalog

10. Jul 10, 2025Exploited flaw

    Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability (CVE-2025-5777). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

11. Jun 30, 2025Exploited flaw

    Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (CVE-2025-6543). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

12. Jan 17, 2024Exploited flaw

    Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability (CVE-2023-6548). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

13. Jan 17, 2024Exploited flaw

    Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (CVE-2023-6549). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

14. Oct 18, 2023Exploited flaw

    Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability (CVE-2023-4966). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

15. Aug 16, 2023Exploited flaw

    Citrix Content Collaboration ShareFile Improper Access Control Vulnerability (CVE-2023-24489). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

16. Jul 19, 2023Exploited flaw

    Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability (CVE-2023-3519). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

17. Dec 13, 2022Exploited flaw

    Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability (CVE-2022-27518). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

18. Mar 25, 2022Exploited flaw

    Citrix Multiple Products Remote Code Execution Vulnerability (CVE-2017-6316). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

19. Mar 25, 2022Exploited flaw

    Citrix SD-WAN and NetScaler SQL Injection Vulnerability (CVE-2019-12989). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

20. Mar 25, 2022Exploited flaw

    Citrix SD-WAN and NetScaler Command Injection Vulnerability (CVE-2019-12991). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

21. Mar 25, 2022Exploited flaw

    Citrix ShareFile Improper Access Control Vulnerability (CVE-2021-22941). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

22. Nov 3, 2021Exploited flaw

    Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability (CVE-2019-11634). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

23. Nov 3, 2021Exploited flaw

    Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability (CVE-2019-13608). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

24. Nov 3, 2021Exploited flaw

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability (CVE-2019-19781). Added to CISA's list of security flaws known to be exploited by attackers. CISA lists it as used in ransomware campaigns.

    Source: CISA Known Exploited Vulnerabilities catalog

25. Nov 3, 2021Exploited flaw

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability (CVE-2020-8193). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

26. Nov 3, 2021Exploited flaw

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability (CVE-2020-8195). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

27. Nov 3, 2021Exploited flaw

    Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability (CVE-2020-8196). Added to CISA's list of security flaws known to be exploited by attackers.

    Source: CISA Known Exploited Vulnerabilities catalog

We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works

To cite: Vendor History, "Citrix security incident history," vendorhistory.com/vendor/citrix, data checked Oct 26, 2026. Free to reuse under CC BY 4.0 with credit to Vendor History.