VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21
NetScaler-ADC-VPX-200-FIPS-VPX-1000-FIPS-EN
Virtual Appliance
· NetScaler ADC Series
Is the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 still supported?
No. Citrix ended support for the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 on 2024-07-01. No further security fixes will be issued. See Citrix's lifecycle bulletin.
When does the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 reach end of support?
Citrix support for the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 ends on 2024-07-01.
What replaces the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21?
Citrix has not published a successor model for the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21.
What known-exploited CVEs apply to the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 past end of support?
21 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 runs. These will not be patched on this device because it is past the Citrix security-support date. See the Known Exploited Vulnerabilities table below for the full list.
Known Exploited Vulnerabilities
This device is past Citrix's security-support date. 21 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Citrix is not issuing patches for this model. Isolate, compensate, or refresh.
| CVE | KEV added | Vulnerability | Flags |
|---|---|---|---|
CVE-2026-88779
|
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | ||
CVE-2026-88772
|
Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | ||
CVE-2026-88771
|
Citrix NetScaler Improper Input Validation Vulnerability | ||
CVE-2026-19490
|
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | ||
CVE-2026-8452
|
Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | ||
CVE-2026-3055
|
Citrix NetScaler Out-of-Bounds Read Vulnerability | ||
CVE-2025-7775
|
Citrix NetScaler Memory Overflow Vulnerability | ||
CVE-2025-5777
|
Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability | Ransomware | |
CVE-2025-6543
|
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability | ||
CVE-2023-6549
|
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | ||
CVE-2023-6548
|
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | ||
CVE-2023-4966
|
Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability | Ransomware | |
CVE-2023-3519
|
Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability | Ransomware | |
CVE-2022-27518
|
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability | ||
CVE-2019-12991
|
Citrix SD-WAN and NetScaler Command Injection Vulnerability | ||
CVE-2019-12989
|
Citrix SD-WAN and NetScaler SQL Injection Vulnerability | ||
CVE-2017-6316
|
Citrix Multiple Products Remote Code Execution Vulnerability | ||
CVE-2020-8193
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability | ||
CVE-2020-8195
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | ||
CVE-2020-8196
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability | ||
CVE-2019-19781
|
Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability | Ransomware |
Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.
Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.
VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 Lifecycle Overview
The Citrix VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 (NetScaler-ADC-VPX-200-FIPS-VPX-1000-FIPS-EN) is a virtual appliance product in the Citrix NetScaler ADC series. This product has reached end of life as of , meaning Citrix no longer provides technical support, software updates, or hardware replacement for this product. It was last available for purchase on . Organizations still running the VPX 200 FIPS VPX 1000 FIPS (perpetual release range bandwidth based on VPX FIPS) EN 1-Jul-21 should plan a migration .
Lifecycle Milestones
| Lifecycle notice published | 5y 4mo ago | |
|---|---|---|
| End of sale | 5y 4mo ago | |
| End of software maintenance | 2y 4mo ago | |
| Last date of support | 2y 4mo ago |