# Citrix vulnerabilities > Citrix has 438 published vulnerabilities across 266 products in our catalogue. 25 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Hypervisor, with 62. If you run Citrix software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/citrix ## At a glance - **Published vulnerabilities:** 438 - **Known to be exploited:** 25 - **Products:** 266 - **Versions:** 1,209 - **Most recently added to the known-exploited list:** [CVE-2026-88779](https://www.precursorintelligence.com/what-is/cve-2026-88779), 4 October 2026. We keep watching the list. ## Which Citrix products have the most vulnerabilities? - [Hypervisor](https://www.precursorintelligence.com/product/citrix/hypervisor): 62 published vulnerabilities, 1 version - [Xenserver](https://www.precursorintelligence.com/product/citrix/xenserver): 51 published vulnerabilities, 20 versions - [NetScaler Gateway](https://www.precursorintelligence.com/product/citrix/netscaler_gateway): 39 published vulnerabilities, 40 versions - [Netscaler Gateway Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_gateway_firmware): 31 published vulnerabilities, 35 versions - [Gateway](https://www.precursorintelligence.com/product/citrix/gateway): 30 published vulnerabilities, 20 versions - [Application Delivery Controller Firmware](https://www.precursorintelligence.com/product/citrix/application_delivery_controller_firmware): 30 published vulnerabilities, 26 versions - [Application Delivery Controller](https://www.precursorintelligence.com/product/citrix/application_delivery_controller): 30 published vulnerabilities, 15 versions - [Netscaler Application Delivery Controller Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_application_delivery_controller_firmware): 29 published vulnerabilities, 45 versions - [NetScaler ADC](https://www.precursorintelligence.com/product/citrix/netscaler_application_delivery_controller): 26 published vulnerabilities, 33 versions - [Xenmobile Server](https://www.precursorintelligence.com/product/citrix/xenmobile_server): 22 published vulnerabilities, 25 versions Each product page lists its own known-exploited flaws. ## Which Citrix vulnerabilities are being exploited? 25 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2026-88779](https://www.precursorintelligence.com/what-is/cve-2026-88779): Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. High, CVSS 8.7, chance of use in 30 days 0.6%, known exploited since 4 October 2026. - [CVE-2026-19490](https://www.precursorintelligence.com/what-is/cve-2026-19490): Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability. Critical, CVSS 9.3, chance of use in 30 days 23%, known exploited since 9 September 2026. - [CVE-2025-7775](https://www.precursorintelligence.com/what-is/cve-2025-7775): Citrix NetScaler Memory Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 20%, known exploited since 26 August 2025. - [CVE-2024-8069](https://www.precursorintelligence.com/what-is/cve-2024-8069): Citrix Session Recording Deserialization of Untrusted Data Vulnerability. High, CVSS 8.0, chance of use in 30 days 15%, known exploited since 25 August 2025. - [CVE-2024-8068](https://www.precursorintelligence.com/what-is/cve-2024-8068): Citrix Session Recording Improper Privilege Management Vulnerability. High, CVSS 8.0, chance of use in 30 days 3.5%, known exploited since 25 August 2025. - [CVE-2025-5777](https://www.precursorintelligence.com/what-is/cve-2025-5777): Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability. High, CVSS 7.5, chance of use in 30 days >99%, known exploited since 10 July 2025. - [CVE-2025-6543](https://www.precursorintelligence.com/what-is/cve-2025-6543): Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 11%, known exploited since 30 June 2025. - [CVE-2023-6549](https://www.precursorintelligence.com/what-is/cve-2023-6549): Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability. High, CVSS 8.2, chance of use in 30 days 58%, known exploited since 17 January 2024. - [CVE-2023-6548](https://www.precursorintelligence.com/what-is/cve-2023-6548): Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability. Medium, CVSS 5.5, chance of use in 30 days 3.2%, known exploited since 17 January 2024. - [CVE-2023-4966](https://www.precursorintelligence.com/what-is/cve-2023-4966): Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability. Critical, CVSS 9.4, chance of use in 30 days >99%, known exploited since 18 October 2023. - [CVE-2023-24489](https://www.precursorintelligence.com/what-is/cve-2023-24489): Citrix Content Collaboration ShareFile Improper Access Control Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 97%, known exploited since 16 August 2023. - [CVE-2023-3519](https://www.precursorintelligence.com/what-is/cve-2023-3519): Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 19 July 2023. - [CVE-2022-27518](https://www.precursorintelligence.com/what-is/cve-2022-27518): Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 6.9%, known exploited since 13 December 2022. - [CVE-2021-22941](https://www.precursorintelligence.com/what-is/cve-2021-22941): Citrix ShareFile Improper Access Control Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 54%, known exploited since 25 March 2022. - [CVE-2017-6316](https://www.precursorintelligence.com/what-is/cve-2017-6316): Citrix Multiple Products Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 73%, known exploited since 25 March 2022. - [CVE-2019-12989](https://www.precursorintelligence.com/what-is/cve-2019-12989): Citrix SD-WAN and NetScaler SQL Injection Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 95%, known exploited since 25 March 2022. - [CVE-2019-12991](https://www.precursorintelligence.com/what-is/cve-2019-12991): Citrix SD-WAN and NetScaler Command Injection Vulnerability. High, CVSS 8.8, chance of use in 30 days 74%, known exploited since 25 March 2022. - [CVE-2014-6271](https://www.precursorintelligence.com/what-is/cve-2014-6271): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022. - [CVE-2014-7169](https://www.precursorintelligence.com/what-is/cve-2014-7169): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 28 January 2022. - [CVE-2019-11634](https://www.precursorintelligence.com/what-is/cve-2019-11634): Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days 8.1%, known exploited since 3 November 2021. - [CVE-2019-19781](https://www.precursorintelligence.com/what-is/cve-2019-19781): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability. Critical, CVSS 9.8, chance of use in 30 days >99%, known exploited since 3 November 2021. - [CVE-2019-13608](https://www.precursorintelligence.com/what-is/cve-2019-13608): Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability. High, CVSS 7.5, chance of use in 30 days 30%, known exploited since 3 November 2021. - [CVE-2020-8193](https://www.precursorintelligence.com/what-is/cve-2020-8193): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 88%, known exploited since 3 November 2021. - [CVE-2020-8195](https://www.precursorintelligence.com/what-is/cve-2020-8195): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability. Medium, CVSS 6.5, chance of use in 30 days 33%, known exploited since 3 November 2021. - [CVE-2020-8196](https://www.precursorintelligence.com/what-is/cve-2020-8196): Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability. Medium, CVSS 4.3, chance of use in 30 days 26%, known exploited since 3 November 2021. ## Which Citrix flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2023-4966](https://www.precursorintelligence.com/what-is/cve-2023-4966): >99%, Critical (CVSS 9.4), known exploited - [CVE-2019-19781](https://www.precursorintelligence.com/what-is/cve-2019-19781): >99%, Critical (CVSS 9.8), known exploited - [CVE-2014-6271](https://www.precursorintelligence.com/what-is/cve-2014-6271): >99%, Critical (CVSS 9.8), known exploited - [CVE-2025-5777](https://www.precursorintelligence.com/what-is/cve-2025-5777): >99%, High (CVSS 7.5), known exploited - [CVE-2014-7169](https://www.precursorintelligence.com/what-is/cve-2014-7169): >99%, Critical (CVSS 9.8), known exploited - [CVE-2023-3519](https://www.precursorintelligence.com/what-is/cve-2023-3519): >99%, Critical (CVSS 9.8), known exploited - [CVE-2023-24489](https://www.precursorintelligence.com/what-is/cve-2023-24489): 97%, Critical (CVSS 9.8), known exploited - [CVE-2019-12989](https://www.precursorintelligence.com/what-is/cve-2019-12989): 95%, Critical (CVSS 9.8), known exploited - [CVE-2020-8193](https://www.precursorintelligence.com/what-is/cve-2020-8193): 88%, Medium (CVSS 6.5), known exploited - [CVE-2023-24488](https://www.precursorintelligence.com/what-is/cve-2023-24488): 81%, Medium (CVSS 6.1) ## All Citrix products we track 202 products with at least one tracked version, most vulnerabilities first (the top 150 here; every product is on the page): - [Hypervisor](https://www.precursorintelligence.com/product/citrix/hypervisor): 62 vulnerabilities, 1 version - [Xenserver](https://www.precursorintelligence.com/product/citrix/xenserver): 51 vulnerabilities, 20 versions - [NetScaler Gateway](https://www.precursorintelligence.com/product/citrix/netscaler_gateway): 39 vulnerabilities, 40 versions - [Netscaler Gateway Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_gateway_firmware): 31 vulnerabilities, 35 versions - [Gateway](https://www.precursorintelligence.com/product/citrix/gateway): 30 vulnerabilities, 20 versions - [Application Delivery Controller Firmware](https://www.precursorintelligence.com/product/citrix/application_delivery_controller_firmware): 30 vulnerabilities, 26 versions - [Application Delivery Controller](https://www.precursorintelligence.com/product/citrix/application_delivery_controller): 30 vulnerabilities, 15 versions - [Netscaler Application Delivery Controller Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_application_delivery_controller_firmware): 29 vulnerabilities, 45 versions - [NetScaler ADC](https://www.precursorintelligence.com/product/citrix/netscaler_application_delivery_controller): 26 vulnerabilities, 33 versions - [Xenmobile Server](https://www.precursorintelligence.com/product/citrix/xenmobile_server): 22 vulnerabilities, 25 versions - [SD-WAN](https://www.precursorintelligence.com/product/citrix/sd-wan): 18 vulnerabilities, 23 versions - [Netscaler SD-WAN](https://www.precursorintelligence.com/product/citrix/netscaler_sd-wan): 18 vulnerabilities, 35 versions - [Access Gateway](https://www.precursorintelligence.com/product/citrix/access_gateway): 14 vulnerabilities, 24 versions - [Gateway Firmware](https://www.precursorintelligence.com/product/citrix/gateway_firmware): 14 vulnerabilities, 5 versions - [Workspace](https://www.precursorintelligence.com/product/citrix/workspace): 12 vulnerabilities, 73 versions - [Netscaler](https://www.precursorintelligence.com/product/citrix/netscaler): 12 vulnerabilities, 8 versions - [SD-WAN Wanop](https://www.precursorintelligence.com/product/citrix/sd-wan_wanop): 10 vulnerabilities, 21 versions - [Metaframe](https://www.precursorintelligence.com/product/citrix/metaframe): 10 vulnerabilities, 6 versions - [Xen](https://www.precursorintelligence.com/product/citrix/xen): 9 vulnerabilities, 20 versions - [Xenapp](https://www.precursorintelligence.com/product/citrix/xenapp): 9 vulnerabilities, 16 versions - [Metaframe Presentation Server](https://www.precursorintelligence.com/product/citrix/metaframe_presentation_server): 9 vulnerabilities, 4 versions - [Virtual Apps and Desktops](https://www.precursorintelligence.com/product/citrix/virtual_apps_and_desktops): 8 vulnerabilities, 11 versions - [Cloudportal Services Manager](https://www.precursorintelligence.com/product/citrix/cloudportal_services_manager): 8 vulnerabilities, 1 version - [Xendesktop](https://www.precursorintelligence.com/product/citrix/xendesktop): 8 vulnerabilities, 13 versions - [Sharefile Storagezones Controller](https://www.precursorintelligence.com/product/citrix/sharefile_storagezones_controller): 8 vulnerabilities, 42 versions - [Presentation Server](https://www.precursorintelligence.com/product/citrix/presentation_server): 7 vulnerabilities, 2 versions - [Netscaler Access Gateway Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_access_gateway_firmware): 7 vulnerabilities, 14 versions - [Nfuse](https://www.precursorintelligence.com/product/citrix/nfuse): 6 vulnerabilities, 4 versions - [Netscaler Sdx](https://www.precursorintelligence.com/product/citrix/netscaler_sdx): 6 vulnerabilities, 26 versions - [Provisioning Services](https://www.precursorintelligence.com/product/citrix/provisioning_services): 6 vulnerabilities, 13 versions - [Secure Access Client](https://www.precursorintelligence.com/product/citrix/secure_access_client): 6 vulnerabilities, 5 versions - [Access Essentials](https://www.precursorintelligence.com/product/citrix/access_essentials): 6 vulnerabilities, 3 versions - [Application Delivery Management](https://www.precursorintelligence.com/product/citrix/application_delivery_management): 5 vulnerabilities, 5 versions - [Cloudplatform](https://www.precursorintelligence.com/product/citrix/cloudplatform): 4 vulnerabilities, 5 versions - [Web Interface](https://www.precursorintelligence.com/product/citrix/web_interface): 4 vulnerabilities, 14 versions - [Netscaler Sdx Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_sdx_firmware): 4 vulnerabilities, 1 version - [Desktop Server](https://www.precursorintelligence.com/product/citrix/desktop_server): 4 vulnerabilities, 1 version - [Storefront Server](https://www.precursorintelligence.com/product/citrix/storefront_server): 3 vulnerabilities, 23 versions - [Gateway Plug-in](https://www.precursorintelligence.com/product/citrix/gateway_plug-in): 3 vulnerabilities, 4 versions - [Netscaler Service Delivery Appliance Service VM](https://www.precursorintelligence.com/product/citrix/netscaler_service_delivery_appliance_service_vm): 3 vulnerabilities, 1 version - [Netscaler SD-WAN Center](https://www.precursorintelligence.com/product/citrix/netscaler_sd-wan_center): 3 vulnerabilities, 17 versions - [Citrix SD-WAN Center](https://www.precursorintelligence.com/product/citrix/citrix_sd-wan_center): 3 vulnerabilities, 12 versions - [Netscaler Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_firmware): 3 vulnerabilities, 12 versions - [Netscaler Console](https://www.precursorintelligence.com/product/citrix/netscaler_console): 3 vulnerabilities, 3 versions - [Presentation Server Client](https://www.precursorintelligence.com/product/citrix/presentation_server_client): 3 vulnerabilities, 7 versions - [Command Center](https://www.precursorintelligence.com/product/citrix/command_center): 3 vulnerabilities, 2 versions - [SD-WAN 4100 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_4100_firmware): 2 vulnerabilities, 3 versions - [SD-WAN 410 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_410_firmware): 2 vulnerabilities, 3 versions - [Linux Virtual Delivery Agent](https://www.precursorintelligence.com/product/citrix/linux_virtual_delivery_agent): 2 vulnerabilities, 20 versions - [SD-WAN 2100 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_2100_firmware): 2 vulnerabilities, 3 versions - [SD-WAN 1000 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_1000_firmware): 2 vulnerabilities, 3 versions - [Secure Mail](https://www.precursorintelligence.com/product/citrix/secure_mail): 2 vulnerabilities, 1 version - [Session Recording](https://www.precursorintelligence.com/product/citrix/session_recording): 2 vulnerabilities, 24 versions - [Metaframe Client](https://www.precursorintelligence.com/product/citrix/metaframe_client): 2 vulnerabilities, 1 version - [Vdi-in-a-Box](https://www.precursorintelligence.com/product/citrix/vdi-in-a-box): 2 vulnerabilities, 12 versions - [Metaframe Password Manager](https://www.precursorintelligence.com/product/citrix/metaframe_password_manager): 2 vulnerabilities, 2 versions - [Program Neighborhood Agent](https://www.precursorintelligence.com/product/citrix/program_neighborhood_agent): 2 vulnerabilities, 1 version - [SD-WAN 2000 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_2000_firmware): 2 vulnerabilities, 3 versions - [Receiver](https://www.precursorintelligence.com/product/citrix/receiver): 2 vulnerabilities, 4 versions - [SD-WAN 110 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_110_firmware): 2 vulnerabilities, 3 versions - [Sharefile](https://www.precursorintelligence.com/product/citrix/sharefile): 2 vulnerabilities, 19 versions - [Gateway Plug-in for Linux](https://www.precursorintelligence.com/product/citrix/gateway_plug-in_for_linux): 2 vulnerabilities, 1 version - [SD-WAN 1100 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_1100_firmware): 2 vulnerabilities, 3 versions - [SD-WAN 5100 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_5100_firmware): 2 vulnerabilities, 3 versions - Online Plug-in for Windows for Xenapp & Xendesktop: 2 vulnerabilities, 1 version - [SD-WAN 6100 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_6100_firmware): 2 vulnerabilities, 3 versions - [Workspace App](https://www.precursorintelligence.com/product/citrix/workspace_app): 2 vulnerabilities, 4 versions - [SD-WAN 4000 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_4000_firmware): 2 vulnerabilities, 3 versions - [SD-WAN 400 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_400_firmware): 2 vulnerabilities, 3 versions - [Access Gateway Plug-in](https://www.precursorintelligence.com/product/citrix/access_gateway_plug-in): 2 vulnerabilities, 5 versions - [SD-WAN 210 Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_210_firmware): 2 vulnerabilities, 3 versions - [Appdna](https://www.precursorintelligence.com/product/citrix/appdna): 1 vulnerability, 2 versions - [Broadcast Server](https://www.precursorintelligence.com/product/citrix/broadcast_server): 1 vulnerability, 3 versions - [Cloud Connector](https://www.precursorintelligence.com/product/citrix/cloud_connector): 1 vulnerability, 1 version - [Deterministic Network Enhancer](https://www.precursorintelligence.com/product/citrix/deterministic_network_enhancer): 1 vulnerability, 2 versions - [Edgesight for Endpoints](https://www.precursorintelligence.com/product/citrix/edgesight_for_endpoints): 1 vulnerability, 2 versions - [Edgesight for Netscaler](https://www.precursorintelligence.com/product/citrix/edgesight_for_netscaler): 1 vulnerability, 2 versions - [Edgesight for Presentation Server](https://www.precursorintelligence.com/product/citrix/edgesight_for_presentation_server): 1 vulnerability, 2 versions - [Federated Authentication Service](https://www.precursorintelligence.com/product/citrix/federated_authentication_service): 1 vulnerability, 2 versions - [Gotomeeting](https://www.precursorintelligence.com/product/citrix/gotomeeting): 1 vulnerability, 1 version - [Ica Client](https://www.precursorintelligence.com/product/citrix/ica_client): 1 vulnerability, 1 version - [Ica Program Neighborhood Client](https://www.precursorintelligence.com/product/citrix/ica_program_neighborhood_client): 1 vulnerability, 1 version - [Ios Receiver](https://www.precursorintelligence.com/product/citrix/ios_receiver): 1 vulnerability, 1 version - [License Server](https://www.precursorintelligence.com/product/citrix/license_server): 1 vulnerability, 1 version - [License Server Vpx](https://www.precursorintelligence.com/product/citrix/license_server_vpx): 1 vulnerability, 1 version - [Licensing](https://www.precursorintelligence.com/product/citrix/licensing): 1 vulnerability, 6 versions - [Licensing Administration Console](https://www.precursorintelligence.com/product/citrix/licensing_administration_console): 1 vulnerability, 1 version - [Metaframe Conferencing Manager](https://www.precursorintelligence.com/product/citrix/metaframe_conferencing_manager): 1 vulnerability, 1 version - [Metaframe Secure Access Manager](https://www.precursorintelligence.com/product/citrix/metaframe_secure_access_manager): 1 vulnerability, 3 versions - [Netscaler Agent](https://www.precursorintelligence.com/product/citrix/netscaler_agent): 1 vulnerability, 52 versions - [Netscaler Gateway 11.0 Firmware](https://www.precursorintelligence.com/product/citrix/netscaler_gateway_11.0_firmware): 1 vulnerability, 1 version - [Online Plug-in for Windows](https://www.precursorintelligence.com/product/citrix/online_plug-in_for_windows): 1 vulnerability, 2 versions - [Program Neighborhood Client](https://www.precursorintelligence.com/product/citrix/program_neighborhood_client): 1 vulnerability, 1 version - [Receiver Desktop](https://www.precursorintelligence.com/product/citrix/receiver_desktop): 1 vulnerability, 1 version - [SD-WAN Center Management Console](https://www.precursorintelligence.com/product/citrix/sd-wan_center_management_console): 1 vulnerability, 2 versions - [SD-WAN Orchestrator](https://www.precursorintelligence.com/product/citrix/sd-wan_orchestrator): 1 vulnerability, 8 versions - [Secure Gateway](https://www.precursorintelligence.com/product/citrix/secure_gateway): 1 vulnerability, 7 versions - [Sharefile Mobile](https://www.precursorintelligence.com/product/citrix/sharefile_mobile): 1 vulnerability, 2 versions - [Sharefile Mobile for Tablets](https://www.precursorintelligence.com/product/citrix/sharefile_mobile_for_tablets): 1 vulnerability, 2 versions - [Sharefile Storage Zones Controller](https://www.precursorintelligence.com/product/citrix/sharefile_storage_zones_controller): 1 vulnerability, 1 version - [Winframe](https://www.precursorintelligence.com/product/citrix/winframe): 1 vulnerability, 1 version - [Worx Home](https://www.precursorintelligence.com/product/citrix/worx_home): 1 vulnerability, 3 versions - [Xenapp Online](https://www.precursorintelligence.com/product/citrix/xenapp_online): 1 vulnerability, 1 version - [Xenclient Xt](https://www.precursorintelligence.com/product/citrix/xenclient_xt): 1 vulnerability, 3 versions - [Xenmobile](https://www.precursorintelligence.com/product/citrix/xenmobile): 1 vulnerability, 5 versions - [Xenmobile Device Manager](https://www.precursorintelligence.com/product/citrix/xenmobile_device_manager): 1 vulnerability, 2 versions - [Xenmobile Device Manager MDM](https://www.precursorintelligence.com/product/citrix/xenmobile_device_manager_mdm): 1 vulnerability, 1 version - [Xenmobile Mdx Toolkit](https://www.precursorintelligence.com/product/citrix/xenmobile_mdx_toolkit): 1 vulnerability, 2 versions - [SD-WAN 1000 Premium Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_1000_premium_edition_firmware): 0 vulnerabilities, 1 version - [SD-WAN 1000 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_1000_standard_edition_firmware): 0 vulnerabilities, 1 version - [Password Manager Console](https://www.precursorintelligence.com/product/citrix/password_manager_console): 0 vulnerabilities, 1 version - [Online Plug-in](https://www.precursorintelligence.com/product/citrix/online_plug-in): 0 vulnerabilities, 7 versions - [Offline Plug-in](https://www.precursorintelligence.com/product/citrix/offline_plug-in): 0 vulnerabilities, 5 versions - [SD-WAN 1100 Premium Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_1100_premium_edition_firmware): 0 vulnerabilities, 1 version - [SD-WAN 1100 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_1100_standard_edition_firmware): 0 vulnerabilities, 1 version - [Metaframe Presentation Server for Windows](https://www.precursorintelligence.com/product/citrix/metaframe_presentation_server_for_windows): 0 vulnerabilities, 2 versions - [SD-WAN 110 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_110_standard_edition_firmware): 0 vulnerabilities, 1 version - [Metaframe Presentation Server Client](https://www.precursorintelligence.com/product/citrix/metaframe_presentation_server_client): 0 vulnerabilities, 1 version - [Metaframe Presentation Server Administration Snap-in](https://www.precursorintelligence.com/product/citrix/metaframe_presentation_server_administration_snap-in): 0 vulnerabilities, 1 version - [SD-WAN 2000 Premium Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_2000_premium_edition_firmware): 0 vulnerabilities, 1 version - [SD-WAN 2000 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_2000_standard_edition_firmware): 0 vulnerabilities, 1 version - [Metaframe Access Suite Licensing](https://www.precursorintelligence.com/product/citrix/metaframe_access_suite_licensing): 0 vulnerabilities, 1 version - [Management Console for Metaframe Presentation Server](https://www.precursorintelligence.com/product/citrix/management_console_for_metaframe_presentation_server): 0 vulnerabilities, 1 version - [Management Console for Citrix Presentation Server](https://www.precursorintelligence.com/product/citrix/management_console_for_citrix_presentation_server): 0 vulnerabilities, 2 versions - [SD-WAN 2100 Premium Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_2100_premium_edition_firmware): 0 vulnerabilities, 1 version - [SD-WAN 2100 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_2100_standard_edition_firmware): 0 vulnerabilities, 1 version - [License Server Administration](https://www.precursorintelligence.com/product/citrix/license_server_administration): 0 vulnerabilities, 4 versions - [SD-WAN 210 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_210_standard_edition_firmware): 0 vulnerabilities, 1 version - [License Configuration Tool](https://www.precursorintelligence.com/product/citrix/license_configuration_tool): 0 vulnerabilities, 1 version - [Ica Web Client](https://www.precursorintelligence.com/product/citrix/ica_web_client): 0 vulnerabilities, 2 versions - [Hmr Test Pack](https://www.precursorintelligence.com/product/citrix/hmr_test_pack): 0 vulnerabilities, 1 version - [SD-WAN 4000 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_4000_standard_edition_firmware): 0 vulnerabilities, 1 version - [Hdx Wmi Provider](https://www.precursorintelligence.com/product/citrix/hdx_wmi_provider): 0 vulnerabilities, 1 version - [SD-WAN 400 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_400_standard_edition_firmware): 0 vulnerabilities, 1 version - [Hdx Mediastream for Flash Server](https://www.precursorintelligence.com/product/citrix/hdx_mediastream_for_flash_server): 0 vulnerabilities, 3 versions - [Group Policy Management](https://www.precursorintelligence.com/product/citrix/group_policy_management): 0 vulnerabilities, 1 version - [Group Policy Client-Side Extension](https://www.precursorintelligence.com/product/citrix/group_policy_client-side_extension): 0 vulnerabilities, 2 versions - [SD-WAN 4100 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_4100_standard_edition_firmware): 0 vulnerabilities, 1 version - [Gotoassist Corporate](https://www.precursorintelligence.com/product/citrix/gotoassist_corporate): 0 vulnerabilities, 1 version - [SD-WAN 410 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_410_standard_edition_firmware): 0 vulnerabilities, 1 version - [Gotoassist](https://www.precursorintelligence.com/product/citrix/gotoassist): 0 vulnerabilities, 1 version - [Enhanced Desktop Experience](https://www.precursorintelligence.com/product/citrix/enhanced_desktop_experience): 0 vulnerabilities, 1 version - [SD-WAN 5100 Premium Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_5100_premium_edition_firmware): 0 vulnerabilities, 1 version - [SD-WAN 5100 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_5100_standard_edition_firmware): 0 vulnerabilities, 1 version - [Edgesight for Xenapp Agent](https://www.precursorintelligence.com/product/citrix/edgesight_for_xenapp_agent): 0 vulnerabilities, 1 version - [SD-WAN 6100 Premium Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_6100_premium_edition_firmware): 0 vulnerabilities, 1 version - [SD-WAN 6100 Standard Edition Firmware](https://www.precursorintelligence.com/product/citrix/sd-wan_6100_standard_edition_firmware): 0 vulnerabilities, 1 version - [Xenapp Server Configuration Tool](https://www.precursorintelligence.com/product/citrix/xenapp_server_configuration_tool): 0 vulnerabilities, 4 versions - [Xenapp Server Role Manager](https://www.precursorintelligence.com/product/citrix/xenapp_server_role_manager): 0 vulnerabilities, 2 versions - [Delivery Services Console Report Center](https://www.precursorintelligence.com/product/citrix/delivery_services_console_report_center): 0 vulnerabilities, 1 version ## Questions ### How many vulnerabilities does Citrix have? Our catalogue lists 438 published vulnerabilities across 266 products and 1,209 versions from Citrix. The most recent Citrix flaw added to the known-exploited list is CVE-2026-88779, on 4 October 2026. ### Which Citrix vulnerabilities are being exploited? 25 Citrix vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2026-88779, CVE-2026-19490 and CVE-2025-7775. The full list is on this page. ### Which Citrix product has the most vulnerabilities? Hypervisor, with 62 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Citrix vulnerabilities? Create a Precursor Intelligence account and track the Citrix products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Citrix? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact