Skip to content

Secure Remote Access / VPN · head-to-head

Citrix vs OpenVPN

SSL/IPsec VPN gateways and ZTNA appliances. Counts are scoped to this segment and the selected published-date window. Citrix carries a disclosed CVE volume comparable to OpenVPN. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Citrix versus OpenVPN. Each row gives the metric, Citrix’s count on the left and OpenVPN’s count on the right.
CitrixMetricOpenVPN
33Total CVEs32
14Critical6
17High21
2Medium5
0Low0
16Open in latest28
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Citrix

42.4% critical
Critical
1442.4%
High
1751.5%
Medium
26.1%
Low
00.0%

OpenVPN

18.8% critical
Critical
618.8%
High
2165.6%
Medium
515.6%
Low
00.0%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Citrix

Recent CVEs affecting Citrix
CVESeverityCVSSPublished
CVE-2026-88779(opens NVD record)High
7.5
Oct 4, 2026
CVE-2026-88778(opens NVD record)High
7.5
Sep 27, 2026
CVE-2026-88777(opens NVD record)Critical
9.8
Sep 27, 2026
CVE-2026-88776(opens NVD record)Critical
9.8
Sep 27, 2026
CVE-2026-88775(opens NVD record)Critical
9.8
Sep 27, 2026
CVE-2026-88774(opens NVD record)High
7.2
Sep 27, 2026

OpenVPN

Recent CVEs affecting OpenVPN
CVESeverityCVSSPublished
CVE-2026-13379(opens NVD record)Critical
9.1
Jul 30, 2026
CVE-2026-13117(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12996(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12932(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-11771(opens NVD record)High
7.5
Jul 30, 2026
CVE-2025-3110(opens NVD record)High
7.5
Jul 8, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts