CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Improper input validation in Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.
Affected products
citrix: application delivery controller firmware; citrix: netscaler gateway firmware; citrix: gateway firmware; citrix: sd-wan wanop; citrix: 4000-wo; citrix: 4100-wo; citrix: 5000-wo; citrix: 5100-wo; citrix: gateway plug-in for linux
References5
- support.citrix.com/article/CTX276688 Vendor Advisory
- support.citrix.com/article/CTX276688 Vendor Advisory
- packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local… ExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/160047/Citrix-ADC-NetScaler-Local… ExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=… US Government Resource
Metrics
- CVSS 3.1
-
6.5
MEDIUM
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS — exploit probability
- 33% percentile: 98 · as of 2 November 2026
- CWE
- CWE-20CWE-22