Citrix: ثغرات مُستغلّة
- 27ثغرة مُستغلّة
- 7تستخدمها برامج الفدية
- 04/10/2026آخر ما أُضيف
- NetScaler 6
- NetScaler ADC and NetScaler Gateway 5
- Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance 4
- Session Recording 2
- NetScaler ADC and Gateway 2
- SD-WAN and NetScaler 2
- Content Collaboration 1
- Application Delivery Controller (ADC) and Gateway 1
- ShareFile 1
- NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server 1
- StoreFront Server 1
- Workspace Application and Receiver for Windows 1
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 04/10/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | مرتفع 8.7 | 11% |
| 27/09/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | حرجة 9.5 | 78% |
| 27/09/2026 | Improper Input Validation | NetScaler | حرجة 9.5 | 82% |
| 09/09/2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | حرجة 9.3 | 33% |
| 26/08/2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | مرتفع 8.8 | 1.0% |
| 30/03/2026 | Out-of-Bounds Read | NetScaler | حرجة 9.3 | 91% |
| 26/08/2025 | Memory Overflow | NetScaler | حرجة 9.2 | 21% |
| 25/08/2025 | Deserialization of Untrusted Data | Session Recording | متوسطة 5.1 | 21% |
| 25/08/2025 | Improper Privilege Management | Session Recording | متوسطة 5.1 | 3.5% |
| 10/07/2025 | Out-of-Bounds Read | NetScaler ADC and Gateway | حرجة 9.3 | >99.9% |
| 30/06/2025 | Buffer Overflow | NetScaler ADC and Gateway | حرجة 9.2 | 10% |
| 17/01/2024 | Buffer Overflow | NetScaler ADC and NetScaler Gateway | مرتفع 8.2 | 58% |
| 17/01/2024 | Code Injection | NetScaler ADC and NetScaler Gateway | متوسطة 5.5 | 3.2% |
| 18/10/2023 | Buffer Overflow | NetScaler ADC and NetScaler Gateway | حرجة 9.4 | >99.9% |
| 16/08/2023 | ShareFile Improper Access Control | Content Collaboration | حرجة 9.8 | 97% |
| 19/07/2023 | Code Injection | NetScaler ADC and NetScaler Gateway | حرجة 9.8 | 99.7% |
| 13/12/2022 | Authentication Bypass | Application Delivery Controller (ADC) and Gateway | حرجة 9.8 | 6.9% |
| 25/03/2022 | Improper Access Control | ShareFile | حرجة 9.8 | 54% |
| 25/03/2022 | Command Injection | SD-WAN and NetScaler | مرتفع 8.8 | 74% |
| 25/03/2022 | SQL Injection | SD-WAN and NetScaler | حرجة 9.8 | 95% |
| 25/03/2022 | Multiple Products Remote Code Execution | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | حرجة 9.8 | 73% |
| 03/11/2021 | ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | متوسطة 4.3 | 26% |
| 03/11/2021 | ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | متوسطة 6.5 | 33% |
| 03/11/2021 | ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | متوسطة 6.5 | 88% |
| 03/11/2021 | ADC, Gateway, and SD-WAN WANOP Appliance Code Execution | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | حرجة 9.8 | >99.9% |
| 03/11/2021 | XML External Entity (XXE) Processing | StoreFront Server | مرتفع 7.5 | 30% |
| 03/11/2021 | Remote Code Execution | Workspace Application and Receiver for Windows | حرجة 9.8 | 8.1% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.