COOEY // HUBcompliance · community · intelligence

FAIL › dossier

Citrix company FedRAMP market

FedRAMP provider ·

3

failure events

0

zero-days

0

RCEs

1

on KEV

2

critical

45

worst shame

Dossier not yet built — the RAG curator builds one for players with ≥2 failure events (factory/dossier.py). The failure history and sentiment below are live.

Failure history 3 events

Date	Event	Sev	Flags	Shame	Summary
2026-03-30	CVE-2026-3055	high	⌖KEV	45	Citrix NetScaler SAML IDP configuration allows out-of-bounds memory reads, enabling attackers to read sensitive data without code execution.
2026-06-30	CVE-2026-8655	critical		35	Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured
2026-06-30	CVE-2026-8452	critical		35	Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

FedRAMP catalog products 1

Product	Status	Impact
Citrix for Government	Authorized	Moderate