Citrix
CPE vendor key: citrix ·
30 CVEs published in the last 24 months.
CVEs (365 d)
5
Avg CVSS (365 d)
8.76
over 5 CVEs
Avg EPSS pct (365 d)
0.80
higher = more likely exploited
KEV hit rate (365 d)
60.0%
3 of 5 added to CISA KEV
LLM-credited CVEs
0
Monthly CVE volume — last 24 months
Each point is one calendar month. Bars in the
severity card to the right slice the same volume by CVSS band.
Severity mix
Stacked by CVSS band (Critical / High / Medium /
Low) using the best available metric per CVE.
Top affected products (24 mo)
10
10
7
4
3
2
2
2
2
1
Distinct CVEs that include each product in their
CPE configuration.
Top CWEs (24 mo)
9
5
2
2
2
2
1
1
1
1
Distinct CVEs assigned each weakness.
Recent CISA KEV adds (last 12 months)
| Added | CVE | Product | KEV name |
|---|---|---|---|
| 2026-03-30 | CVE-2026-3055 | NetScaler | Citrix NetScaler Out-of-Bounds Read Vulnerability |
| 2025-08-26 | CVE-2025-7775 | NetScaler | Citrix NetScaler Memory Overflow Vulnerability |
| 2025-08-25 | CVE-2024-8068 | Session Recording | Citrix Session Recording Improper Privilege Management Vulnerability |
| 2025-08-25 | CVE-2024-8069 | Session Recording | Citrix Session Recording Deserialization of Untrusted Data Vulnerability |
| 2025-07-10 | CVE-2025-5777 | NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability |
| 2025-06-30 | CVE-2025-6543 | NetScaler ADC and Gateway | Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability |
Filtered to KEV rows where the CISA vendor name matches this vendor,
to drop cross-OS noise (e.g. third-party Windows apps that CPE-map to
Microsoft).
LLM-credited CVEs from this vendor
No LLM-credited CVEs for this vendor yet.
From
mythos_attributed_cves: CVEs whose NVD description
or vendor advisory credits an LLM-assisted discovery. Confidence is
high for every row.
Generated 19 June 2026 13:18 UTC <span class="time-ago" data-iso="2026-06-19T13:18:30Z"></span>.