MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19
NetScaler-ADC-MPX/SDX-25100-40G-25100Z-40G-MPX/SDX-25160-40G-25160Z-40G-MPX/SDX-25200-40G-25200Z-40G
Appliance
· NetScaler ADC Series
Is the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 still supported?
No. Citrix ended support for the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 on 2025-04-01. No further security fixes will be issued. See Citrix's lifecycle bulletin.
When does the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 reach end of support?
Citrix support for the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 ends on 2025-04-01.
What replaces the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19?
Citrix has not published a successor model for the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19.
What known-exploited CVEs apply to the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 past end of support?
21 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 runs. These will not be patched on this device because it is past the Citrix security-support date. See the Known Exploited Vulnerabilities table below for the full list.
Known Exploited Vulnerabilities
This device is past Citrix's security-support date. 21 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Citrix is not issuing patches for this model. Isolate, compensate, or refresh.
| CVE | KEV added | Vulnerability | Flags |
|---|---|---|---|
CVE-2026-88779
|
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | ||
CVE-2026-88772
|
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | ||
CVE-2026-88771
|
Citrix NetScaler Improper Input Validation Vulnerability | ||
CVE-2026-19490
|
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | ||
CVE-2026-8452
|
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | ||
CVE-2026-3055
|
Citrix NetScaler Out-of-Bounds Read Vulnerability | ||
CVE-2025-7775
|
Citrix NetScaler Memory Overflow Vulnerability | ||
CVE-2025-5777
|
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | Ransomware | |
CVE-2025-6543
|
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | ||
CVE-2023-6549
|
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | ||
CVE-2023-6548
|
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | ||
CVE-2023-4966
|
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | Ransomware | |
CVE-2023-3519
|
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | Ransomware | |
CVE-2022-27518
|
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | ||
CVE-2019-12991
|
Citrix SD-WAN and NetScaler Command Injection Vulnerability | ||
CVE-2019-12989
|
Citrix SD-WAN and NetScaler SQL Injection Vulnerability | ||
CVE-2017-6316
|
Citrix Multiple Products Remote Code Execution Vulnerability | ||
CVE-2020-8193
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | ||
CVE-2020-8195
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | ||
CVE-2020-8196
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | ||
CVE-2019-19781
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | Ransomware |
Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.
Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.
MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 Lifecycle Overview
The Citrix MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 (NetScaler-ADC-MPX/SDX-25100-40G-25100Z-40G-MPX/SDX-25160-40G-25160Z-40G-MPX/SDX-25200-40G-25200Z-40G) is a appliance product in the Citrix NetScaler ADC series. This product has reached end of life as of , meaning Citrix no longer provides technical support, software updates, or hardware replacement for this product. It was last available for purchase on . Organizations still running the MPX/SDX 25100-40G & 25100Z-40G MPX/SDX 25160-40G & 25160Z-40G MPX/SDX 25200-40G & 25200Z-40G EN 01-Oct-19 should plan a migration .
Lifecycle Milestones
| Lifecycle notice published | 7y 1mo ago | |
|---|---|---|
| End of sale | 6y 7mo ago | |
| End of software maintenance | 1y 7mo ago | |
| Last date of support | 1y 7mo ago |