Skip to content

Secure Remote Access / VPN · head-to-head

Citrix vs OpenVPN

SSL/IPsec VPN gateways and ZTNA appliances. Counts are scoped to this segment and the selected published-date window. Citrix carries 1.3× the disclosed CVE volume of OpenVPN. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Citrix versus OpenVPN. Each row gives the metric, Citrix’s count on the left and OpenVPN’s count on the right.
CitrixMetricOpenVPN
24Total CVEs18
12Critical3
12High12
0Medium3
0Low0
16Open in latest28
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Citrix

50.0% critical
Critical
1250.0%
High
1250.0%
Medium
00.0%
Low
00.0%

OpenVPN

16.7% critical
Critical
316.7%
High
1266.7%
Medium
316.7%
Low
00.0%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Citrix

Recent CVEs affecting Citrix
CVESeverityCVSSPublished
CVE-2026-88779(opens NVD record)High
7.5
Oct 4, 2026
CVE-2026-88778(opens NVD record)High
7.5
Sep 27, 2026
CVE-2026-88777(opens NVD record)Critical
9.8
Sep 27, 2026
CVE-2026-88776(opens NVD record)Critical
9.8
Sep 27, 2026
CVE-2026-88775(opens NVD record)Critical
9.8
Sep 27, 2026
CVE-2026-88774(opens NVD record)High
7.2
Sep 27, 2026

OpenVPN

Recent CVEs affecting OpenVPN
CVESeverityCVSSPublished
CVE-2026-13379(opens NVD record)Critical
9.1
Jul 30, 2026
CVE-2026-13117(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12996(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12932(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-11771(opens NVD record)High
7.5
Jul 30, 2026
CVE-2025-3110(opens NVD record)High
7.5
Jul 8, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts