Find a vulnerability

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "UniconOS Management (Scout) On-Prem Scout LTSR sans le correctif de s\u00e9curit\u00e9 2508 CU2 LTSR",
      "product": {
        "name": "UniconOS",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "XenServer 8.4 et 9 avec Workload Balancing versions ant\u00e9rieures \u00e0 2026.1.1 et Conversion Manager versions ant\u00e9rieures \u00e0 2026.2.0",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Scout Cloud Gateway (SCG) On-Prem sans le correctif de s\u00e9curit\u00e9 2605.1-3",
      "product": {
        "name": "Scout Cloud Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "UniconOS Management (Scout) On-Prem sans le correctif de s\u00e9curit\u00e9 2609.1",
      "product": {
        "name": "UniconOS",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2022-36763",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36763"
    },
    {
      "name": "CVE-2026-98432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-98432"
    },
    {
      "name": "CVE-2022-36764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36764"
    },
    {
      "name": "CVE-2026-45447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
    },
    {
      "name": "CVE-2026-97631",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-97631"
    },
    {
      "name": "CVE-2024-38797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38797"
    },
    {
      "name": "CVE-2024-38796",
      "url": "https://www.cve.org/CVERecord?id=CVE-2024-38796"
    },
    {
      "name": "CVE-2026-111497",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-111497"
    },
    {
      "name": "CVE-2026-102703",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102703"
    }
  ],
  "initial_release_date": "2026-11-04T00:00:00",
  "last_revision_date": "2026-11-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1449",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-11-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Citrix. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Citrix",
  "vendor_advisories": [
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697256",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697256\u0026articleURL=XenServer_Security_Update_for_Multiple_Issues"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697300",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697300\u0026articleURL=Citrix_Security_Advisory_for_CVE_2026_111497_Impact_on_Unicon_eLux_Scout"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler ADC versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-73.49 FIPS",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.49",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1-FIPS ant\u00e9rieures \u00e0 13.1-NDcPP 13.1.37.286",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.32",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.49",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.32",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-109619",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109619"
    },
    {
      "name": "CVE-2026-109618",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-109618"
    }
  ],
  "initial_release_date": "2026-10-27T00:00:00",
  "last_revision_date": "2026-10-27T00:00:00",
  "links": [
    {
      "title": "Protection de l\u0027acc\u00e8s de gestion de NetScaler contre les vuln\u00e9rabilit\u00e9s PHP CVE-2026-109618 et CVE-2026-109619 ",
      "url": "https://community.citrix.com/techzone-blogs/110_security-updates/protecting-netscaler-management-access-from-php-cve-2026-109618-cve-2026-109619-r1640/"
    }
  ],
  "reference": "CERTFR-2026-AVI-1394",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Citrix NetScaler ADC et Gateway. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix NetScaler ADC et Gateway",
  "vendor_advisories": [
    {
      "published_at": "2026-10-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697263",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697263\u0026articleURL=Citrix_Security_Advisory_for_CVE_2026_109618_and_CVE_2026_109619"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "XenServer versions 8.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "XenServer versions 9 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-114406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114406"
    }
  ],
  "initial_release_date": "2026-10-26T00:00:00",
  "last_revision_date": "2026-10-26T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1384",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Citrix XenServer. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Citrix XenServer",
  "vendor_advisories": [
    {
      "published_at": "2026-10-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697257",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697257\u0026articleURL=XenServer_Security_Update_for_CVE_2026_114406"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "UniconOS versions ant\u00e9rieures \u00e0 2607.2",
      "product": {
        "name": "UniconOS",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace app versions ant\u00e9rieures \u00e0 2603.20 pour Windows",
      "product": {
        "name": "Workspace app",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "UniconOS versions ant\u00e9rieures \u00e0 2603 LTSR CU2",
      "product": {
        "name": "UniconOS",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "XenServer versions 8.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace app versions ant\u00e9rieures \u00e0 2607 Hotfix 1 pour Windows",
      "product": {
        "name": "Workspace app",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "XenServer versions 9 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace app versions ant\u00e9rieures \u00e0 2507 CU3 Hotfix 1 pour Windows",
      "product": {
        "name": "Workspace app",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-102700",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102700"
    },
    {
      "name": "CVE-2026-53563",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53563"
    },
    {
      "name": "CVE-2026-84419",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84419"
    },
    {
      "name": "CVE-2026-79610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-79610"
    },
    {
      "name": "CVE-2026-84420",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-84420"
    },
    {
      "name": "CVE-2026-53564",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53564"
    },
    {
      "name": "CVE-2026-53562",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53562"
    },
    {
      "name": "CVE-2026-102701",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-102701"
    }
  ],
  "initial_release_date": "2026-10-14T00:00:00",
  "last_revision_date": "2026-10-14T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1310",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Citrix. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Citrix",
  "vendor_advisories": [
    {
      "published_at": "2026-10-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697187",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697187\u0026articleURL=Citrix_UniconOS_Security_Bulletin_CVE_2026_53562_CVE_2026_53563_and_CVE_2026_53564"
    },
    {
      "published_at": "2026-10-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697181",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697181\u0026articleURL=Citrix_Workspace_App_for_Windows_Security_Bulletin_CVE_2026_84419_and_CVE_2026_84420"
    },
    {
      "published_at": "2026-10-13",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697170",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697170\u0026articleURL=XenServer_Security_Update_for_CVE_2026_79610_CVE_2026_79610_CVE_2026_102700_and_CVE_2026_102701"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler Gateway versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.46",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1-FIPS ant\u00e9rieures \u00e0 13.1-NDcPP 13.1.37.283",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.29",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.29",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.46",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-73.46 FIPS",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-107406",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107406"
    }
  ],
  "initial_release_date": "2026-10-09T00:00:00",
  "last_revision_date": "2026-10-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1285",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Citrix NetScaler ADC et Gateway. Elle permet \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un d\u00e9ni de service \u00e0 distance.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Citrix NetScaler ADC et Gateway",
  "vendor_advisories": [
    {
      "published_at": "2026-10-09",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697191",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697191\u0026articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_107406"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler Gateway versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.41",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.28",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-73.41 FIPS",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1-FIPS ant\u00e9rieures \u00e0 13.1-NDcPP 13.1-37.282",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.41",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.28",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-88779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88779"
    }
  ],
  "initial_release_date": "2026-10-05T00:00:00",
  "last_revision_date": "2026-10-05T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1263",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-10-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Citrix NetScaler ADC et Gateway. Elle permet \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance.\n\nLa CISA indique que la vuln\u00e9rabilit\u00e9 CVE-2026-88779 est activement exploit\u00e9e.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Citrix NetScaler ADC et Gateway",
  "vendor_advisories": [
    {
      "published_at": "2026-10-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697174",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174\u0026articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88779"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Citrix NetScaler ADC versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-73.37 FIPS",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Citrix NetScaler ADC versions 13.1-FIPS ant\u00e9rieures \u00e0 13.1-NDcPP 13.1.37.279",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.23",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.37",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Citrix NetScaler ADC versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.37",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Citrix NetScaler ADC versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.23",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-88777",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88777"
    },
    {
      "name": "CVE-2026-88776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88776"
    },
    {
      "name": "CVE-2026-88771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88771"
    },
    {
      "name": "CVE-2026-88772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88772"
    },
    {
      "name": "CVE-2026-88775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88775"
    },
    {
      "name": "CVE-2026-88774",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88774"
    },
    {
      "name": "CVE-2026-88773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88773"
    },
    {
      "name": "CVE-2026-88778",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88778"
    }
  ],
  "initial_release_date": "2026-09-28T00:00:00",
  "last_revision_date": "2026-09-28T00:00:00",
  "links": [
    {
      "title": "Billet de blogue Citrix du 27 septembre 2026",
      "url": "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/#Indicators_of_Compromise__cabcb4"
    }
  ],
  "reference": "CERTFR-2026-AVI-1235",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-28T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Citrix NetScaler ADC et Gateway. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n\nCitrix indique que les vuln\u00e9rabilit\u00e9s CVE-2026-88771 et CVE-2026-88772 sont activement exploit\u00e9es.\n\nL\u0027\u00e9diteur indique que si les correctifs n\u0027ont pas \u00e9t\u00e9 install\u00e9s, tous les \u00e9quipements sont vuln\u00e9rables dans leur configuration par d\u00e9faut.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix NetScaler ADC et Gateway",
  "vendor_advisories": [
    {
      "published_at": "2026-09-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697096",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Workspace app versions ant\u00e9rieures \u00e0 2607 LTSR pour Windows",
      "product": {
        "name": "Workspace app",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace app versions ant\u00e9rieures \u00e0 2603.11 pour Windows",
      "product": {
        "name": "Workspace app",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Workspace app versions ant\u00e9rieures \u00e0 2507.1 LTSR CU3 pour Windows",
      "product": {
        "name": "Workspace app",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2026-09-09T00:00:00",
  "last_revision_date": "2026-09-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1137",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Citrix Workspace app. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix Workspace app",
  "vendor_advisories": [
    {
      "published_at": "2026-09-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697034",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697034\u0026articleURL=Citrix_Workspace_app_for_Windows_Security_Bulletin_CVE_2026_78546_and_CVE_2026_78547"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler ADC versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-73.32 FIPS",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1-FIPS ant\u00e9rieures \u00e0 13.1-NDcPP 13.1-37.277",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions ant\u00e9rieures \u00e0 13.1-63.21",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions ant\u00e9rieures \u00e0 13.1-63.21",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions ant\u00e9rieures \u00e0 14.1-73.32",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC\u202f versions ant\u00e9rieures \u00e0 14.1-73.32",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-19489",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19489"
    },
    {
      "name": "CVE-2026-19490",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-19490"
    }
  ],
  "initial_release_date": "2026-08-20T00:00:00",
  "last_revision_date": "2026-08-20T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1059",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-08-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Citrix. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, un contournement de la politique de s\u00e9curit\u00e9 et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Citrix",
  "vendor_advisories": [
    {
      "published_at": "2026-08-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696939",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696939\u0026articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_19489_and_CVE_2026_19490"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "XenServer versions 8.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "XenServer versions 9 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-42492",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42492"
    },
    {
      "name": "CVE-2026-62428",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62428"
    },
    {
      "name": "CVE-2026-62436",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62436"
    },
    {
      "name": "CVE-2026-62434",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62434"
    },
    {
      "name": "CVE-2026-62432",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62432"
    },
    {
      "name": "CVE-2026-62435",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62435"
    },
    {
      "name": "CVE-2026-62431",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-62431"
    }
  ],
  "initial_release_date": "2026-07-29T00:00:00",
  "last_revision_date": "2026-07-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0941",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Citrix XenServer. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix XenServer",
  "vendor_advisories": [
    {
      "published_at": "2026-07-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696836",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696836\u0026articleURL=XenServer_Security_Update_for_Multiple_Issues"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Secure Access Client versions ant\u00e9rieures \u00e0 26.6.1.20 pour Windows",
      "product": {
        "name": "Citrix Secure Access client",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Endpoint Analysis Client versions ant\u00e9rieures \u00e0 26.5.1.7 pour Windows",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "XenCenter versions ant\u00e9rieures \u00e0 2026.4.0",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "XenCenter SDK client versions ant\u00e9rieures \u00e0 26.15.0 pour PowerShell et C#",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-53565",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53565"
    },
    {
      "name": "CVE-2026-42491",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-42491"
    },
    {
      "name": "CVE-2026-53566",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-53566"
    }
  ],
  "initial_release_date": "2026-07-15T00:00:00",
  "last_revision_date": "2026-07-15T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0885",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Citrix. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Citrix",
  "vendor_advisories": [
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696811",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696811\u0026articleURL=XenServer_Security_Update_for_CVE_2026_42491"
    },
    {
      "published_at": "2026-07-14",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696734",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696734\u0026articleURL=Citrix_Secure_Access_Client_for_Windows_and_Citrix_Endpoint_Analysis_Client_for_Windows_Security_Bulletin_for_CVE_2026_53565_and_CVE_2026_53566"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler ADC  versions 13.1-FIPS et 13.1-NDcPP ant\u00e9rieures \u00e0 13.1.37.272",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC\u202fet NetScaler Gateway versions 13.1 ant\u00e9rieures \u00e0 13.1-63.18",
      "product": {
        "name": "NetScaler",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC  versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-72.61 FIPS",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC\u202fet NetScaler Gateway versions 14.1 ant\u00e9rieures \u00e0 14.1-72.61",
      "product": {
        "name": "NetScaler",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-8452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8452"
    },
    {
      "name": "CVE-2026-8451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8451"
    },
    {
      "name": "CVE-2026-10817",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10817"
    },
    {
      "name": "CVE-2026-10816",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-10816"
    },
    {
      "name": "CVE-2026-8655",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-8655"
    },
    {
      "name": "CVE-2026-13474",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-13474"
    }
  ],
  "initial_release_date": "2026-07-01T00:00:00",
  "last_revision_date": "2026-07-01T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0822",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-07-01T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Citrix. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Citrix",
  "vendor_advisories": [
    {
      "published_at": "2026-06-30",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696604",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "XenServer versions 8.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-23559",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23559"
    },
    {
      "name": "CVE-2026-23558",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23558"
    },
    {
      "name": "CVE-2025-54505",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-54505"
    },
    {
      "name": "CVE-2026-23556",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23556"
    },
    {
      "name": "CVE-2026-23561",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23561"
    },
    {
      "name": "CVE-2026-23560",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23560"
    }
  ],
  "initial_release_date": "2026-04-29T00:00:00",
  "last_revision_date": "2026-04-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0510",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-04-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Citrix XenServer. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une \u00e9l\u00e9vation de privil\u00e8ges, un d\u00e9ni de service \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix XenServer",
  "vendor_advisories": [
    {
      "published_at": "2026-04-28",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696527",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696527\u0026articleURL=XenServer_Security_Update_for_Multiple_Issues"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "XenServer versions 8.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-4397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4397"
    }
  ],
  "initial_release_date": "2026-03-25T00:00:00",
  "last_revision_date": "2026-03-25T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0358",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-25T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Citrix XenServer. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Citrix XenServer",
  "vendor_advisories": [
    {
      "published_at": "2026-03-25",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696397",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696397\u0026articleURL=XenServer_Security_Update_for_CVE_2026_4397"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler Gateway\u202f versions 14.0.x ant\u00e9rieures \u00e0 14.1-66.59",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.0.x ant\u00e9rieures \u00e0 14.1-66.59",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC 13.1-FIPS et 13.1-NDcPP versions ant\u00e9rieures \u00e0 13.1.37.262",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway\u202f versions 13.1.x ant\u00e9rieures \u00e0 13.1-62.23",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1.x ant\u00e9rieures \u00e0 13.1-62.23",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-4368",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-4368"
    },
    {
      "name": "CVE-2026-3055",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-3055"
    }
  ],
  "initial_release_date": "2026-03-23T00:00:00",
  "last_revision_date": "2026-03-23T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0337",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Citrix. Elles permettent \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Citrix",
  "vendor_advisories": [
    {
      "published_at": "2026-03-23",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696300",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300\u0026articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "XenServer 8.4 sans les derniers correctifs de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-23554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23554"
    }
  ],
  "initial_release_date": "2026-03-18T00:00:00",
  "last_revision_date": "2026-03-18T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0311",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-03-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Citrix XenServer. Elle permet \u00e0 un attaquant de provoquer un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Citrix XenServer",
  "vendor_advisories": [
    {
      "published_at": "2026-03-17",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX696350",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696350\u0026articleURL=XenServer_Security_Update_for_CVE_2026_23554"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "XenServer version 8.4 sans le dernier correctif de s\u00e9curit\u00e9",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-23553",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-23553"
    },
    {
      "name": "CVE-2025-58151",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-58151"
    }
  ],
  "initial_release_date": "2026-01-27T00:00:00",
  "last_revision_date": "2026-01-27T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0090",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-01-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Citrix XenServer. Elles permettent \u00e0 un attaquant de provoquer un d\u00e9ni de service \u00e0 distance et une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix XenServer",
  "vendor_advisories": [
    {
      "published_at": "2026-01-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX695997",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695997\u0026articleURL=XenServer_Security_Update_for_CVE_2025_58151_and_CVE_2026_23553"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": " XenServer 8.4 sur processeur AMD Zen 5 sans le microgiciel incluant le correctif de s\u00e9curit\u00e9 AGESA PI 1.0.0.4",
      "product": {
        "name": "XenServer",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-62626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-62626"
    }
  ],
  "initial_release_date": "2025-12-09T00:00:00",
  "last_revision_date": "2025-12-09T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-1081",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-12-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans Citrix XenServer. Elle permet \u00e0 un attaquant de provoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Vuln\u00e9rabilit\u00e9 dans Citrix XenServer",
  "vendor_advisories": [
    {
      "published_at": "2025-12-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX695797",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695797\u0026articleURL=XenServer_Security_Update_for_CVE_2025_62626"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler ADC versions 13.1-FIPS et NDcPP ant\u00e9rieures \u00e0 13.1-37.250-FIPS et NDcPP",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 14.x ant\u00e9rieures \u00e0 14.1-56.73",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 12.1-FIPS et 12.1-NDcPP ant\u00e9rieures \u00e0 12.1-55.333-FIPS et NDcPP",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.x ant\u00e9rieures \u00e0 14.1-56.73",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions ant\u00e9rieures \u00e0 13.1-60.32",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "Netscaler ADC versions ant\u00e9rieures \u00e0 13.1-60.32",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-12101",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-12101"
    }
  ],
  "initial_release_date": "2025-11-12T00:00:00",
  "last_revision_date": "2025-11-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0987",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-11-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de code indirecte \u00e0 distance (XSS)"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 d\u00e9couverte dans les produits Citrix. Elle permet \u00e0 un attaquant de provoquer une injection de code indirecte \u00e0 distance (XSS).",
  "title": "Vuln\u00e9rabilit\u00e9 dans les produits Citrix",
  "vendor_advisories": [
    {
      "published_at": "2025-11-11",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX695486",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX695486\u0026articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2025_12101"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler Gateway versions ant\u00e9rieures \u00e0 13.1-59.22",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions ant\u00e9rieures \u00e0 14.1-47.48",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions ant\u00e9rieures \u00e0 13.1-59.22",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC 12.1-FIPS et 12.1-NDcPP versions ant\u00e9rieures \u00e0 12.1-55.330",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions ant\u00e9rieures \u00e0 14.1-47.48",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC 13.1-FIPS et 13.1-NDcPP versions ant\u00e9rieures \u00e0 13.1-37.241",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "Citrix rappelle que les versions 12.1 and 13.0 de NetScaler ADC et NetScaler Gateway sont obsol\u00e8tes et ne recevront plus de mises \u00e0 jour de s\u00e9curit\u00e9. L\u0027\u00e9diteur recommande de migrer vers une version maintenue et \u00e0 jour.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-7776",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7776"
    },
    {
      "name": "CVE-2025-7775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7775"
    },
    {
      "name": "CVE-2025-8424",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-8424"
    }
  ],
  "initial_release_date": "2025-08-26T00:00:00",
  "last_revision_date": "2025-08-26T00:00:00",
  "links": [],
  "reference": "CERTFR-2025-AVI-0730",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-08-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Citrix NetScaler ADC et NetScaler Gateway.  Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, un d\u00e9ni de service \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.\n\nCitrix indique que la vuln\u00e9rabilit\u00e9 CVE-2025-7775 est activement exploit\u00e9e.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix NetScaler ADC et NetScaler Gateway",
  "vendor_advisories": [
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX694938",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938\u0026articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2025_7775_CVE_2025_7776_and_CVE_2025_8424"
    }
  ]
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53564",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T18:09:53.280111Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-22",
                "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T18:20:56.730Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "UniconOS",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "2607.2 CR",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "2603 LTSR CU2",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-10-13T22:05:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Vulnerability in Citrix UniconOS leading to\u0026nbsp;Arbitrary file read and write\u003cp\u003eThis issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.\u003c/p\u003e"
            }
          ],
          "value": "Vulnerability in Citrix UniconOS leading to\u00a0Arbitrary file read and write\n\nThis issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T22:07:38.794Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697187"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Arbitrary file read and write",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-53564",
    "datePublished": "2026-10-13T22:07:38.794Z",
    "dateReserved": "2026-06-09T18:32:47.375Z",
    "dateUpdated": "2026-10-14T18:20:56.730Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53563",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-14T18:25:44.402509Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-78",
                "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-14T18:26:05.074Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "UniconOS",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "2607.2 CR",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "2603 LTSR CU2",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-10-13T22:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Vulnerability in Citrix UniconOS leading to Persistent Command Execution\u003cp\u003eThis issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.\u003c/p\u003e"
            }
          ],
          "value": "Vulnerability in Citrix UniconOS leading to Persistent Command Execution\n\nThis issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T22:04:13.778Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697187"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Persistent Command Execution",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-53563",
    "datePublished": "2026-10-13T22:04:13.778Z",
    "dateReserved": "2026-06-09T18:32:47.375Z",
    "dateUpdated": "2026-10-14T18:26:05.074Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-84419",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-15T16:35:42.720335Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-15T16:43:51.461Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Workspace app for Windows",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "2603.20 CR",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "LTSR 2607 Hotfix 1",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "LTSR 2507 CU3 Hotfix 1",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-10-13T21:40:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Out-of-bounds write vulnerability in Citrix Workspace app for Windows.\u003cp\u003eThis issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1.\u003c/p\u003e"
            }
          ],
          "value": "Out-of-bounds write vulnerability in Citrix Workspace app for Windows.\n\nThis issue affects Workspace app for Windows: before 2603.20 CR, before LTSR 2607 Hotfix 1, and before LTSR 2507 CU3 Hotfix 1."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T21:44:13.530Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697181"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-Bounds Write",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-84419",
    "datePublished": "2026-10-13T21:44:13.530Z",
    "dateReserved": "2026-09-01T17:47:16.441Z",
    "dateUpdated": "2026-10-15T16:43:51.461Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53562",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-13T17:10:42.055600Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-13T19:31:30.536Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "UniconOS",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "2607 CR",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            },
            {
              "lessThan": "2603 LTSR CU2",
              "status": "affected",
              "version": "0",
              "versionType": "Patch"
            }
          ]
        }
      ],
      "datePublic": "2026-10-13T12:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper link resolution before file access (\u0027link following\u0027) vulnerability in Citrix UniconOS.\u003cp\u003eThis issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2.\u003c/p\u003e"
            }
          ],
          "value": "Improper link resolution before file access (\u0027link following\u0027) vulnerability in Citrix UniconOS.\n\nThis issue affects UniconOS: before 2607 CR and before 2603 LTSR CU2."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-59",
              "description": "CWE-59 Improper link resolution before file access (\u0027link following\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-13T16:54:56.181Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697187"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Local Privilege Escalation",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-53562",
    "datePublished": "2026-10-13T16:54:56.181Z",
    "dateReserved": "2026-06-09T18:32:47.375Z",
    "dateUpdated": "2026-10-13T19:31:30.536Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-78547",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-11T19:34:11.126522Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-11T19:34:31.103Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Citrix Workspace app for Windows",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "2603.11 Current Release (CR)",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "2507.1 LTSR CU3",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            },
            {
              "lessThan": "LTSR 2607",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-09-08T18:58:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.\u003cp\u003eThis issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607.\u003c/p\u003e"
            }
          ],
          "value": "Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows.\n\nThis issue affects Citrix Workspace app for Windows: before 2603.11 Current Release (CR), before 2507.1 LTSR CU3, and before LTSR 2607."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "NONE",
            "attackVector": "PHYSICAL",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:P/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787 Out-of-bounds write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-11T19:11:16.233Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697034\u0026articleTitle=Citrix_Workspace_app_for_Windows_Security_Bulletin_CVE_2026_78546_and_CVE_2026_78547"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-Bounds Write",
      "x_generator": {
        "engine": "Vulnogram 1.0.5"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-78547",
    "datePublished": "2026-09-11T19:07:38.810Z",
    "dateReserved": "2026-08-24T18:48:00.120Z",
    "dateUpdated": "2026-09-11T19:34:31.103Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-18751",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-19T03:55:52.767Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "MacOS"
          ],
          "product": "WorkSpace App",
          "vendor": "Citrix",
          "versions": [
            {
              "status": "affected",
              "version": "2607",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-08-18T12:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.\u003cp\u003eThis issue affects WorkSpace App: 2607.\u003c/p\u003e"
            }
          ],
          "value": "External control of file name or path vulnerability in Citrix WorkSpace App on MacOS.\n\nThis issue affects WorkSpace App: 2607."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-73",
              "description": "CWE-73 External control of file name or path",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-18T12:26:35.987Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/external/article/CTX696911"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-18751",
    "datePublished": "2026-08-18T12:26:35.987Z",
    "dateReserved": "2026-08-03T23:06:10.019Z",
    "dateUpdated": "2026-08-19T03:55:52.767Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53566",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T13:56:00.733974Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-14T13:56:09.574Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Citrix Secure Access Client for Windows",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "26.6.1.20",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T12:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows.\u003cp\u003eThis issue affects Citrix Secure Access Client for Windows: before 26.6.1.20.\u003c/p\u003e"
            }
          ],
          "value": "Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows.\n\nThis issue affects Citrix Secure Access Client for Windows: before 26.6.1.20."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T13:12:57.829Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696734"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Out-of-bounds memory read",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-53566",
    "datePublished": "2026-07-14T13:12:57.829Z",
    "dateReserved": "2026-06-09T18:32:47.375Z",
    "dateUpdated": "2026-07-14T13:56:09.574Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-53565",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-14T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-15T04:00:59.472Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Secure Access Client for Windows",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "26.6.1.20",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Citrix Endpoint Analysis Client for Windows",
          "vendor": "Citrix",
          "versions": [
            {
              "lessThan": "26. 5.1.7",
              "status": "affected",
              "version": "0",
              "versionType": "patch"
            }
          ]
        }
      ],
      "datePublic": "2026-07-14T12:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows.\u003cp\u003eThis issue affects Secure Access Client for Windows: before 26.6.1.20; Citrix Endpoint Analysis Client for Windows: before 26. 5.1.7.\u003c/p\u003e"
            }
          ],
          "value": "Improper Privilege Management vulnerability in Citrix Secure Access Client for Windows, Citrix Citrix Endpoint Analysis Client for Windows.\n\nThis issue affects Secure Access Client for Windows: before 26.6.1.20; Citrix Endpoint Analysis Client for Windows: before 26. 5.1.7."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-269",
              "description": "CWE-269 Improper Privilege Management",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T12:49:17.998Z",
        "orgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
        "shortName": "Citrix"
      },
      "references": [
        {
          "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696734"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e437aed5-38e0-4fa3-a98b-cb73e7acaec6",
    "assignerShortName": "Citrix",
    "cveId": "CVE-2026-53565",
    "datePublished": "2026-07-14T12:49:17.998Z",
    "dateReserved": "2026-06-09T18:32:47.375Z",
    "dateUpdated": "2026-07-15T04:00:59.472Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler Gateway versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.41",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.28",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.1-FIPS ant\u00e9rieures \u00e0 14.1-73.41 FIPS",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1-FIPS ant\u00e9rieures \u00e0 13.1-NDcPP 13.1-37.282",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 14.1.x ant\u00e9rieures \u00e0 14.1-73.41",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions 13.1.x ant\u00e9rieures \u00e0 13.1-64.28",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "closed_at": null,
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-88771",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88771"
    },
    {
      "name": "CVE-2026-88772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88772"
    },
    {
      "name": "CVE-2026-88779",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-88779"
    }
  ],
  "initial_release_date": "2026-09-28T00:00:00",
  "last_revision_date": "2026-10-05T00:00:00",
  "links": [
    {
      "title": "Avis CERT-FR CERTFR-2026-AVI-1263 du 05 octobre 2026",
      "url": "/avis/CERTFR-2026-AVI-1263/"
    },
    {
      "title": "Billet de blogue Google du 29 septembre 2026",
      "url": "https://cloud.google.com/blog/topics/threat-intelligence/defending-against-active-exploitation-of-citrix-netscaler-adc-and-gateway-appliances"
    },
    {
      "title": "Billet de blogue Citrix du 27 septembre 2026",
      "url": "https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778/#Indicators_of_Compromise__cabcb4"
    },
    {
      "title": "Avis CERT-FR CERTFR-2026-AVI-1235 du 28 septembre 2026",
      "url": "/avis/CERTFR-2026-AVI-1235/"
    }
  ],
  "reference": "CERTFR-2026-ALE-011",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-09-28T00:00:00.000000"
    },
    {
      "description": "Ajout de l\u0027existence d\u0027une preuve de concept pour la vuln\u00e9rabilit\u00e9 CVE-2026-88771.",
      "revision_date": "2026-09-28T00:00:00.000000"
    },
    {
      "description": "Ajout du billet de blogue Google et des indicateurs de compromission.",
      "revision_date": "2026-09-30T00:00:00.000000"
    },
    {
      "description": "Ajout de l\u0027existence d\u0027une preuve de concept pour la vuln\u00e9rabilit\u00e9 CVE-2026-88772.",
      "revision_date": "2026-09-30T00:00:00.000000"
    },
    {
      "description": "Ajout de la vuln\u00e9rabilit\u00e9 CVE-2026-88779 et modification des versions correctives en cons\u00e9quence.",
      "revision_date": "2026-10-05T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "\u003cspan class=\"important-content\"\u003e**[Mise \u00e0 jour du 05 octobre 2026]**\u003c/span\u003e\u003cbr\u003e\nLe 4 octobre 2026, Citrix a publi\u00e9 un avis concernant une nouvelle vuln\u00e9rabilit\u00e9 (CVE-2026-88779) permettant un d\u00e9ni de service \u00e0 distance. La CISA indique que cette vuln\u00e9rabilit\u00e9 est activement exploit\u00e9e.\n\n**[Mise \u00e0 jour du 30 septembre 2026]**\u003cbr\u003e\nDans un billet de blogue du 29 septembre 2026 (cf. section Documentation), Mandiant et Google Threat Intelligence Group (GTIG) fournissent des indicateurs de compromission ainsi que des r\u00e8gles de d\u00e9tection au format YARA. Ceux-ci n\u0027ont pas \u00e9t\u00e9 qualifi\u00e9s par l\u0027ANSSI.\n\nSelon Google, la pr\u00e9sence de ces motifs est caract\u00e9ristique d\u0027une exploitation r\u00e9ussie:\n* \u003ccode\u003e0-PPE-0 : default SSLLOG SSL_HANDSHAKE_FAILURE 0 : SPCBId - ClientIP - ClientPort - VserverServiceIP - VserverServicePort 443 - ClientVersion DTLSv1.0 - CipherSuite \"TLS1-AES-256-CBC-SHA\" - Session New - Reason \"Handshake failure-Internal Error\"\u003c/code\u003e (dans *Syslog*)\n* \u003ccode\u003eqat0: Process \u003cPID\u003e NSPPE-\u003c##\u003e exit with orphan rings 5:500\n\u003cbr\u003epitboss[\u003c##\u003e]: pitboss \u003cDATETIME\u003e NOT restarting NSPPE-\u003c##\u003e (\\\u003cPID\\\u003e)\u003c/code\u003e (dans */var/log/messages*)\n\nLe CERT-FR a \u00e9galement connaissance d\u0027une preuve de concept publique pour la vuln\u00e9rabilit\u00e9 CVE-2026-88772.\n\n**[Mise \u00e0 jour du 28 septembre 2026]**\u003cbr\u003e\nLe CERT-FR a connaissance d\u0027une preuve de concept publique pour la vuln\u00e9rabilit\u00e9 CVE-2026-88771.\n\n**[Publication Initiale]**\u003cbr\u003e\nLe 27 septembre 2026, Citrix a publi\u00e9 un avis de s\u00e9curit\u00e9 concernant plusieurs vuln\u00e9rabilit\u00e9s qui affectent NetScaler ADC et Gateway. \nParmi celles-ci, les vuln\u00e9rabilit\u00e9s CVE-2026-88771 et CVE-2026-88772 permettent une ex\u00e9cution de code arbitraire \u00e0 distance par un attaquant non authentifi\u00e9. \n\nCes vuln\u00e9rabilit\u00e9s sont activement exploit\u00e9es et les exploitations ont commenc\u00e9 avant la disponibilit\u00e9 des correctifs.\n\nDe plus, l\u0027\u00e9diteur indique que si les correctifs n\u0027ont pas \u00e9t\u00e9 install\u00e9s, tous les \u00e9quipements sont vuln\u00e9rables dans leur configuration par d\u00e9faut.\n\nDans son billet de blogue (cf. section Documentation), Citrix indique mettre des indicateurs de compromission \u00e0 disposition de ses clients par le biais de la console Netscaler.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Citrix NetScaler ADC et Gateway",
  "vendor_advisories": [
    {
      "published_at": "2026-09-27",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697096",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096\u0026articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88771_CVE_2026_88772_CVE_2026_88773_CVE_2026_88774_CVE_2026_88775_CVE_2026_88776_CVE_2026_88777_and_CVE_2026_88778"
    },
    {
      "published_at": "2026-10-04",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX697174",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174\u0026articleURL=Citrix_NetScaler_ADC_and_Citrix_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_88779"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "NetScaler Gateway versions ant\u00e9rieures \u00e0 13.1-59.22",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions ant\u00e9rieures \u00e0 14.1-47.48",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC versions ant\u00e9rieures \u00e0 13.1-59.22",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC 12.1-FIPS et 12.1-NDcPP versions ant\u00e9rieures \u00e0 12.1-55.330",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler Gateway versions ant\u00e9rieures \u00e0 14.1-47.48",
      "product": {
        "name": "NetScaler Gateway",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    },
    {
      "description": "NetScaler ADC 13.1-FIPS et 13.1-NDcPP versions ant\u00e9rieures \u00e0 13.1-37.241",
      "product": {
        "name": "NetScaler ADC",
        "vendor": {
          "name": "Citrix",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "Citrix rappelle que les versions 12.1 and 13.0 de NetScaler ADC et NetScaler Gateway sont obsol\u00e8tes et ne recevront plus de mises \u00e0 jour de s\u00e9curit\u00e9. L\u0027\u00e9diteur recommande de migrer vers une version maintenue et \u00e0 jour.",
  "closed_at": "2025-09-26",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).\n\nLe CERT-FR recommande l\u0027application des correctifs dans les plus brefs d\u00e9lais.",
  "cves": [
    {
      "name": "CVE-2025-7775",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-7775"
    }
  ],
  "initial_release_date": "2025-08-26T00:00:00",
  "last_revision_date": "2025-09-26T00:00:00",
  "links": [
    {
      "title": "Avis CERT-FR CERTFR-2025-AVI-0730 du 26 ao\u00fbt 2025 ",
      "url": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2025-AVI-0730/"
    },
    {
      "title": "Compromission d\u0027un \u00e9quipement de bordure r\u00e9seau - Endiguement",
      "url": "https://www.cert.ssi.gouv.fr/fiche/CERTFR-2025-RFX-002/"
    },
    {
      "title": "Recommendations de Citrix en cas de soup\u00e7ons de compromission",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694799"
    },
    {
      "title": "Compromission d\u0027un \u00e9quipement de bordure r\u00e9seau - Qualification",
      "url": "https://www.cert.ssi.gouv.fr/fiche/CERTFR-2025-RFX-001/"
    }
  ],
  "reference": "CERTFR-2025-ALE-012",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-08-26T00:00:00.000000"
    },
    {
      "description": "     Cl\u00f4ture de l\u0027alerte. Cela ne signifie pas la fin d\u0027une menace. Seule l\u0027application de la mise \u00e0 jour permet de vous pr\u00e9munir contre l\u0027exploitation de la vuln\u00e9rabilit\u00e9 correspondante.",
      "revision_date": "2025-09-26T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Le 26 ao\u00fbt 2025, Citrix a publi\u00e9 un bulletin de s\u00e9curit\u00e9 (cf. section Documentation) concernant, entre autres, la vuln\u00e9rabilit\u00e9 CVE-2025-7775.\n\nCelle-ci permet une ex\u00e9cution de code arbitraire \u00e0 distance et affecte toutes les versions de Citrix NetScaler ADC et NetScaler Gateway, dans certaines configurations d\u00e9taill\u00e9es par l\u0027\u00e9diteur.\n\nCitrix indique que la vuln\u00e9rabilit\u00e9 CVE-2025-7775 est activement exploit\u00e9e.\n\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Citrix NetScaler ADC et NetScaler Gateway",
  "vendor_advisories": [
    {
      "published_at": "2025-08-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Citrix CTX694938",
      "url": "https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938"
    }
  ]
}