Product overview
NetScaler ADC is tracked by BlackTree as a server-side software product. Its lifecycle page separates release identity, maintenance and security boundaries using the publisher's registered source.
Main capabilities
- Networked or application service delivery
- Administrative and operational interfaces
- Versioned maintenance and security updates
Typical use
Used to provide application, infrastructure or operational services to other systems and users.
Deployment
Deployed on servers, virtual machines, containers or managed infrastructure.
This category-level context is generated from the registered product identity. Confirm exact product capabilities on the publisher's page ↗.
Collected lifecycle data
| Product | NetScaler ADC |
|---|
| Release | MPX/SDX 11500 MPX/SDX 13500 MPX/SDX 14500 MPX/SDX 16500 MPX/SDX 18500 MPX/SDX 20500 MPX/SDX 17550 MPX/SDX 19550 MPX/SDX 20550 MPX/SDX 21550 |
|---|
| End of Lifecycle boundary | 1 January 2020 |
|---|
| Date precision | Day |
|---|
Known exploited vulnerabilities
Catalogue updated 30 Oct 2026These are product-family matches in the CISA Known Exploited Vulnerabilities catalogue. Confirm the affected product version in the vendor advisory.
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.
Citrix · NetScalerRansomware use: Unknown
CISA entry ↗Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for remote code execution or denial of service
Citrix · NetScalerRansomware use: Unknown
CISA entry ↗Citrix NetScaler Improper Input Validation Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper input validation vulnerability that could allow an unauthenticated attacker to execute arbitrary commands.
Citrix · NetScalerRansomware use: Unknown
CISA entry ↗Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an authentication-bypass vulnerability involving an alternate path or channel. When the NetScaler appliance is configured as an AAA virtual server or as a Gateway (SSL VPN, ICA Proxy, CVPN, or RDP Proxy), an unauthenticated remote threat actor may be able to bypass authentication.
Citrix · NetScalerRansomware use: Unknown
CISA entry ↗Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix NetScaler ADC and NetScaler Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability which could lead to denial of service.
Citrix · NetScaler ADC and NetScaler GatewayRansomware use: Unknown
CISA entry ↗Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix NetScaler ADC (formerly Citrix ADC), NetScaler Gateway (formerly Citrix Gateway) and NetScaler ADC FIPS and NDcPP contain an out-of-bounds reads vulnerability when configured as a SAML IDP leading to memory overread.
Citrix · NetScalerRansomware use: Unknown
CISA entry ↗Showing the 6 most recently added of 13 product-family matches.
Package vulnerability advisories
OSV advisories are matched through the registered package URL. A package-family match does not prove that the installed release is affected. Check the affected and fixed versions before remediation.
No package advisories have been linked for this product identity.
This is not evidence that the product has no vulnerabilities.
Source evidence
PRIMARYReady
Citrix lifecycle discovery
NetScaler ADC | MPX/SDX 11500 MPX/SDX 13500 MPX/SDX 14500 MPX/SDX 16500 MPX/SDX 18500 MPX/SDX 20500 MPX/SDX 17550 MPX/SDX 19550 MPX/SDX 20550 MPX/SDX 21550 | EN | 1-Jul-14 CTX218411 | 1-Jan-15 | 1-Jan-20 | 1-Jan-20
Official vendor lifecycle or product-change property. Extracted records require human review.
First collected 12 Sep 2026 · Last collected 29 Oct 2026 · Review state accepted
Open official vendor source ↗