https://exploit-radar.com/en/flux/categories/adc.xml Exploit Radar: Load balancers and access gateways (ADC) The latest additions to CISA’s catalog of exploited vulnerabilities in the “Load balancers and access gateways (ADC)” category (indicative classification). 2026-09-27T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2026-88771/ CVE-2026-88771 — Citrix NetScaler ADC / Gateway 2026-09-27T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Active CERT-FR alert. Added to CISA’s catalog of exploited vulnerabilities on September 27, 2026. https://exploit-radar.com/en/cve/CVE-2026-88772/ CVE-2026-88772 — Citrix NetScaler ADC / Gateway 2026-09-27T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Active CERT-FR alert. Added to CISA’s catalog of exploited vulnerabilities on September 27, 2026. https://exploit-radar.com/en/cve/CVE-2026-94127/ CVE-2026-94127 — F5 BIG-IP 2026-09-22T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 22, 2026. https://exploit-radar.com/en/cve/CVE-2026-19490/ CVE-2026-19490 — Citrix NetScaler ADC / Gateway 2026-09-09T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 9, 2026. https://exploit-radar.com/en/cve/CVE-2026-8452/ CVE-2026-8452 — Citrix NetScaler ADC / Gateway 2026-08-26T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 26, 2026. https://exploit-radar.com/en/cve/CVE-2026-8037/ CVE-2026-8037 — Progress Kemp LoadMaster 2026-08-07T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on August 7, 2026. https://exploit-radar.com/en/cve/CVE-2026-3055/ CVE-2026-3055 — Citrix NetScaler ADC / Gateway 2026-03-30T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. For cloud services, follow the guidance from Citrix. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on March 30, 2026. https://exploit-radar.com/en/cve/CVE-2025-53521/ CVE-2025-53521 — F5 BIG-IP 2026-03-27T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. For cloud services, follow the guidance from F5. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on March 27, 2026. https://exploit-radar.com/en/cve/CVE-2025-58034/ CVE-2025-58034 — Fortinet FortiWeb 2025-11-18T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on November 18, 2025. https://exploit-radar.com/en/cve/CVE-2025-64446/ CVE-2025-64446 — Fortinet FortiWeb 2025-11-14T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on November 14, 2025. https://exploit-radar.com/en/cve/CVE-2025-7775/ CVE-2025-7775 — Citrix NetScaler ADC / Gateway 2025-08-26T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. For cloud services, follow the guidance from Citrix. CISA deadline: 2 days. Added to CISA’s catalog of exploited vulnerabilities on August 26, 2025. https://exploit-radar.com/en/cve/CVE-2025-25257/ CVE-2025-25257 — Fortinet FortiWeb 2025-07-18T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 18, 2025. https://exploit-radar.com/en/cve/CVE-2025-5777/ CVE-2025-5777 — Citrix NetScaler ADC / Gateway 2025-07-10T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. For cloud services, follow the guidance from Citrix. CISA deadline: 1 day. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 10, 2025. https://exploit-radar.com/en/cve/CVE-2025-6543/ CVE-2025-6543 — Citrix NetScaler ADC / Gateway 2025-06-30T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. For cloud services, follow the guidance from Citrix. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 30, 2025. https://exploit-radar.com/en/cve/CVE-2024-1212/ CVE-2024-1212 — Progress Kemp LoadMaster 2024-11-18T00:00:00Z Apply the patches or mitigations from Progress; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on November 18, 2024. https://exploit-radar.com/en/cve/CVE-2024-7593/ CVE-2024-7593 — Ivanti Virtual Traffic Manager (vTM) 2024-09-24T00:00:00Z Apply the patches or mitigations from Ivanti; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on September 24, 2024. https://exploit-radar.com/en/cve/CVE-2023-6548/ CVE-2023-6548 — Citrix NetScaler ADC / Gateway 2024-01-17T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on January 17, 2024. https://exploit-radar.com/en/cve/CVE-2023-6549/ CVE-2023-6549 — Citrix NetScaler ADC / Gateway 2024-01-17T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on January 17, 2024. https://exploit-radar.com/en/cve/CVE-2023-46747/ CVE-2023-46747 — F5 BIG-IP 2023-10-31T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 31, 2023. https://exploit-radar.com/en/cve/CVE-2023-46748/ CVE-2023-46748 — F5 BIG-IP 2023-10-31T00:00:00Z Apply the patches or mitigations from F5; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 31, 2023. https://exploit-radar.com/en/cve/CVE-2023-4966/ CVE-2023-4966 — Citrix NetScaler ADC / Gateway 2023-10-18T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 18, 2023. https://exploit-radar.com/en/cve/CVE-2023-3519/ CVE-2023-3519 — Citrix NetScaler ADC / Gateway 2023-07-19T00:00:00Z Apply the patches or mitigations from Citrix; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on July 19, 2023. https://exploit-radar.com/en/cve/CVE-2022-27518/ CVE-2022-27518 — Citrix NetScaler ADC / Gateway 2022-12-13T00:00:00Z Apply the security update from Citrix. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on December 13, 2022. https://exploit-radar.com/en/cve/CVE-2022-1388/ CVE-2022-1388 — F5 BIG-IP 2022-05-10T00:00:00Z Apply the security update from F5. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on May 10, 2022. https://exploit-radar.com/en/cve/CVE-2021-22991/ CVE-2021-22991 — F5 BIG-IP 2022-01-18T00:00:00Z Apply the security update from F5. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on January 18, 2022. https://exploit-radar.com/en/cve/CVE-2019-19781/ CVE-2019-19781 — Citrix NetScaler ADC / Gateway 2021-11-03T00:00:00Z Apply the security update from Citrix. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-5902/ CVE-2020-5902 — F5 BIG-IP 2021-11-03T00:00:00Z Apply the security update from F5. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2021-22986/ CVE-2021-22986 — F5 BIG-IP 2021-11-03T00:00:00Z Apply the security update from F5. CISA deadline: 14 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8193/ CVE-2020-8193 — Citrix NetScaler ADC / Gateway 2021-11-03T00:00:00Z Apply the security update from Citrix. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8195/ CVE-2020-8195 — Citrix NetScaler ADC / Gateway 2021-11-03T00:00:00Z Apply the security update from Citrix. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-8196/ CVE-2020-8196 — Citrix NetScaler ADC / Gateway 2021-11-03T00:00:00Z Apply the security update from Citrix. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.