Citrix: 악용된 취약점
- 27악용된 취약점
- 7랜섬웨어에 사용됨
- 2026. 10. 4.가장 최근 추가
- NetScaler 6
- NetScaler ADC and NetScaler Gateway 5
- Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance 4
- Session Recording 2
- NetScaler ADC and Gateway 2
- SD-WAN and NetScaler 2
- Content Collaboration 1
- Application Delivery Controller (ADC) and Gateway 1
- ShareFile 1
- NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server 1
- StoreFront Server 1
- Workspace Application and Receiver for Windows 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 4. | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | 높음 8.7 | 11% |
| 2026. 9. 27. | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | 치명적 9.5 | 78% |
| 2026. 9. 27. | Improper Input Validation | NetScaler | 치명적 9.5 | 82% |
| 2026. 9. 9. | Authentication Bypass Using an Alternate Path or Channel | NetScaler | 치명적 9.3 | 33% |
| 2026. 8. 26. | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | 높음 8.8 | 1.0% |
| 2026. 3. 30. | Out-of-Bounds Read | NetScaler | 치명적 9.3 | 91% |
| 2025. 8. 26. | Memory Overflow | NetScaler | 치명적 9.2 | 21% |
| 2025. 8. 25. | Deserialization of Untrusted Data | Session Recording | 보통 5.1 | 21% |
| 2025. 8. 25. | Improper Privilege Management | Session Recording | 보통 5.1 | 3.5% |
| 2025. 7. 10. | Out-of-Bounds Read | NetScaler ADC and Gateway | 치명적 9.3 | >99.9% |
| 2025. 6. 30. | Buffer Overflow | NetScaler ADC and Gateway | 치명적 9.2 | 10% |
| 2024. 1. 17. | Buffer Overflow | NetScaler ADC and NetScaler Gateway | 높음 8.2 | 58% |
| 2024. 1. 17. | Code Injection | NetScaler ADC and NetScaler Gateway | 보통 5.5 | 3.2% |
| 2023. 10. 18. | Buffer Overflow | NetScaler ADC and NetScaler Gateway | 치명적 9.4 | >99.9% |
| 2023. 8. 16. | ShareFile Improper Access Control | Content Collaboration | 치명적 9.8 | 97% |
| 2023. 7. 19. | Code Injection | NetScaler ADC and NetScaler Gateway | 치명적 9.8 | 99.7% |
| 2022. 12. 13. | Authentication Bypass | Application Delivery Controller (ADC) and Gateway | 치명적 9.8 | 6.9% |
| 2022. 3. 25. | Improper Access Control | ShareFile | 치명적 9.8 | 54% |
| 2022. 3. 25. | Command Injection | SD-WAN and NetScaler | 높음 8.8 | 74% |
| 2022. 3. 25. | SQL Injection | SD-WAN and NetScaler | 치명적 9.8 | 95% |
| 2022. 3. 25. | Multiple Products Remote Code Execution | NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server | 치명적 9.8 | 73% |
| 2021. 11. 3. | ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 보통 4.3 | 26% |
| 2021. 11. 3. | ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 보통 6.5 | 33% |
| 2021. 11. 3. | ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 보통 6.5 | 88% |
| 2021. 11. 3. | ADC, Gateway, and SD-WAN WANOP Appliance Code Execution | Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance | 치명적 9.8 | >99.9% |
| 2021. 11. 3. | XML External Entity (XXE) Processing | StoreFront Server | 높음 7.5 | 30% |
| 2021. 11. 3. | Remote Code Execution | Workspace Application and Receiver for Windows | 치명적 9.8 | 8.1% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.