BLACKOUT MAP

Citrix: vulnerabilidades exploradas

AdicionadoVulnerabilidadeProdutoGravidadeChance de ataque
4 de out. de 2026Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-88779NetScalerAlto 8,711%
27 de set. de 2026Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-88772NetScalerCrítica 9,578%
27 de set. de 2026Improper Input ValidationCVE-2026-88771NetScalerCrítica 9,582%
9 de set. de 2026Authentication Bypass Using an Alternate Path or ChannelCVE-2026-19490NetScalerCrítica 9,333%
26 de ago. de 2026Improper Restriction of Operations within the Bounds of a Memory BufferCVE-2026-8452NetScaler ADC and NetScaler GatewayAlto 8,81,0%
30 de mar. de 2026Out-of-Bounds ReadCVE-2026-3055NetScalerCrítica 9,391%
26 de ago. de 2025Memory OverflowCVE-2025-7775NetScalerCrítica 9,221%
25 de ago. de 2025Deserialization of Untrusted DataCVE-2024-8069Session RecordingMédia 5,121%
25 de ago. de 2025Improper Privilege ManagementCVE-2024-8068Session RecordingMédia 5,13,5%
10 de jul. de 2025Out-of-Bounds ReadCVE-2025-5777usada por ransomwareNetScaler ADC and GatewayCrítica 9,3>99,9%
30 de jun. de 2025Buffer OverflowCVE-2025-6543NetScaler ADC and GatewayCrítica 9,210%
17 de jan. de 2024Buffer OverflowCVE-2023-6549NetScaler ADC and NetScaler GatewayAlto 8,258%
17 de jan. de 2024Code InjectionCVE-2023-6548NetScaler ADC and NetScaler GatewayMédia 5,53,2%
18 de out. de 2023Buffer OverflowCVE-2023-4966usada por ransomwareNetScaler ADC and NetScaler GatewayCrítica 9,4>99,9%
16 de ago. de 2023ShareFile Improper Access ControlCVE-2023-24489Content CollaborationCrítica 9,897%
19 de jul. de 2023Code InjectionCVE-2023-3519usada por ransomwareNetScaler ADC and NetScaler GatewayCrítica 9,899,7%
13 de dez. de 2022Authentication BypassCVE-2022-27518Application Delivery Controller (ADC) and GatewayCrítica 9,86,9%
25 de mar. de 2022Improper Access ControlCVE-2021-22941usada por ransomwareShareFileCrítica 9,854%
25 de mar. de 2022Command InjectionCVE-2019-12991SD-WAN and NetScalerAlto 8,874%
25 de mar. de 2022SQL InjectionCVE-2019-12989SD-WAN and NetScalerCrítica 9,895%
25 de mar. de 2022Multiple Products Remote Code ExecutionCVE-2017-6316NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile ServerCrítica 9,873%
3 de nov. de 2021ADC, Gateway, and SD-WAN WANOP Appliance Information DisclosureCVE-2020-8196Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceMédia 4,326%
3 de nov. de 2021ADC, Gateway, and SD-WAN WANOP Appliance Information DisclosureCVE-2020-8195Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceMédia 6,533%
3 de nov. de 2021ADC, Gateway, and SD-WAN WANOP Appliance Authorization BypassCVE-2020-8193Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceMédia 6,588%
3 de nov. de 2021ADC, Gateway, and SD-WAN WANOP Appliance Code ExecutionCVE-2019-19781usada por ransomwareApplication Delivery Controller (ADC), Gateway, and SD-WAN WANOP ApplianceCrítica 9,8>99,9%
3 de nov. de 2021XML External Entity (XXE) ProcessingCVE-2019-13608usada por ransomwareStoreFront ServerAlto 7,530%
3 de nov. de 2021Remote Code ExecutionCVE-2019-11634usada por ransomwareWorkspace Application and Receiver for WindowsCrítica 9,88,1%

Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.