Citrix: ευπάθειες που αξιοποιούνται
- 27ευπάθειες που αξιοποιούνται
- 7χρησιμοποιείται από ransomware
- 4 Οκτ 2026η πιο πρόσφατη προσθήκη
- NetScaler 6
- NetScaler ADC and NetScaler Gateway 5
- Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance 4
- Session Recording 2
- NetScaler ADC and Gateway 2
- SD-WAN and NetScaler 2
- Content Collaboration 1
- Application Delivery Controller (ADC) and Gateway 1
- ShareFile 1
- NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server 1
- StoreFront Server 1
- Workspace Application and Receiver for Windows 1
| Προστέθηκε | Ευπάθεια | Προϊόν | Σοβαρότητα | Πιθανότητα επίθεσης |
|---|---|---|---|---|
| 4 Οκτ 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Υψηλή 8,7 | 11% |
| 27 Σεπ 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Κρίσιμη 9,5 | 78% |
| 27 Σεπ 2026 | Improper Input Validation | NetScaler | Κρίσιμη 9,5 | 82% |
| 9 Σεπ 2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | Κρίσιμη 9,3 | 33% |
| 26 Αυγ 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | Υψηλή 8,8 | 1,0% |
| 30 Μαρ 2026 | Out-of-Bounds Read | NetScaler | Κρίσιμη 9,3 | 91% |
| 26 Αυγ 2025 | Memory Overflow | NetScaler | Κρίσιμη 9,2 | 21% |
| 25 Αυγ 2025 | Deserialization of Untrusted Data | Session Recording | Μέτρια 5,1 | 21% |
| 25 Αυγ 2025 | Improper Privilege Management | Session Recording | Μέτρια 5,1 | 3,5% |
| 10 Ιουλ 2025 | Out-of-Bounds Read | NetScaler ADC and Gateway | Κρίσιμη 9,3 | >99,9% |
| 30 Ιουν 2025 | Buffer Overflow | NetScaler ADC and Gateway | Κρίσιμη 9,2 | 10% |
| 17 Ιαν 2024 | Buffer Overflow | NetScaler ADC and NetScaler Gateway | Υψηλή 8,2 | 58% |
| 17 Ιαν 2024 | Code Injection | NetScaler ADC and NetScaler Gateway | Μέτρια 5,5 | 3,2% |
| 18 Οκτ 2023 | Buffer Overflow | NetScaler ADC and NetScaler Gateway | Κρίσιμη 9,4 | >99,9% |
| 16 Αυγ 2023 | ShareFile Improper Access Control | Content Collaboration | Κρίσιμη 9,8 | 97% |
| 19 Ιουλ 2023 | Code Injection | NetScaler ADC and NetScaler Gateway | Κρίσιμη 9,8 | 99,7% |
| 13 Δεκ 2022 | Authentication Bypass | Application Delivery Controller (ADC) and Gateway | Κρίσιμη 9,8 | 6,9% |
| 25 Μαρ 2022 | Improper Access Control | ShareFile | Κρίσιμη 9,8 | 54% |
| 25 Μαρ 2022 | Command Injection | SD-WAN and NetScaler | Υψηλή 8,8 | 74% |
| 25 Μαρ 2022 | SQL Injection | SD-WAN and NetScaler | Κρίσιμη 9,8 | 95% |
| 25 Μαρ 2022 | Multiple Products Remote Code Execution | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | Κρίσιμη 9,8 | 73% |
| 3 Νοε 2021 | ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Μέτρια 4,3 | 26% |
| 3 Νοε 2021 | ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Μέτρια 6,5 | 33% |
| 3 Νοε 2021 | ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Μέτρια 6,5 | 88% |
| 3 Νοε 2021 | ADC, Gateway, and SD-WAN WANOP Appliance Code Execution | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | Κρίσιμη 9,8 | >99,9% |
| 3 Νοε 2021 | XML External Entity (XXE) Processing | StoreFront Server | Υψηλή 7,5 | 30% |
| 3 Νοε 2021 | Remote Code Execution | Workspace Application and Receiver for Windows | Κρίσιμη 9,8 | 8,1% |
Πηγές: Known Exploited Vulnerabilities (CISA, δημόσιος τομέας), CVE records (cve.org) και EPSS (FIRST). Η πιθανότητα επίθεσης είναι η εκτίμηση EPSS ότι κάποιος θα προσπαθήσει να εκμεταλλευτεί το κενό τις επόμενες 30 ημέρες.