CVE-2023-6548
Citrix NetScaler ADC and NetScaler Gateway
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability
What it is
Citrix NetScaler ADC and NetScaler Gateway contain a code injection vulnerability that allows for authenticated remote code execution on the management interface with access to NSIP, CLIP, or SNIP.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin
- nvd.nist.gov/vuln/detail/CVE-2023-6548
Description and required action as published by CISA. Full record at NVD.
Other Citrix entries on the list
- NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88779 · Oct 4, 2026
- NetScaler Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-88772 · Sep 27, 2026
- NetScaler Citrix NetScaler Improper Input Validation Vulnerability CVE-2026-88771 · Sep 27, 2026
- NetScaler Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-19490 · Sep 9, 2026
- NetScaler ADC and NetScaler Gateway Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability CVE-2026-8452 · Aug 26, 2026
- NetScaler Citrix NetScaler Out-of-Bounds Read Vulnerability CVE-2026-3055 · Mar 30, 2026