Description
A vulnerability has been identified in the management interface of Citrix NetScaler SD-WAN Enterprise and Standard Edition and Citrix CloudBridge Virtual WAN Edition that could result in an unauthenticated, remote attacker being able to execute arbitrary code as a root user. This vulnerability also affects XenMobile Server.
NVD enrichment (full description, CVSS vector, CWEs) has not completed for this CVE yet — shown above is the CISA KEV short description only.
Scoring
- CVSS: Not yet available
- EPSS exploitation probability: Not yet available
- EPSS percentile: Not yet available
CISA KEV status
- Added to KEV: 2022-03-25
- Remediation due date: 2022-04-15
- Known ransomware campaign use: Unknown
More from Citrix
- CVE-2026-88779 — NetScaler
- CVE-2026-88771 — NetScaler
- CVE-2026-88772 — NetScaler
- CVE-2026-19490 — NetScaler
- CVE-2026-8452 — NetScaler ADC and NetScaler Gateway