Skip to content

Secure Remote Access / VPN · head-to-head

Citrix vs OpenVPN

SSL/IPsec VPN gateways and ZTNA appliances. Counts are scoped to this segment and the selected published-date window. OpenVPN carries 1.5× the disclosed CVE volume of Citrix. Volume reflects disclosure practice and install base as much as code quality — read it with the severity mix. Sourced from the NIST NVD; lower counts indicate a smaller disclosed vulnerability surface — not necessarily lower risk.

01

Disclosure record

Bars are normalized per row to the larger value; the leading count is emphasized.

Metric comparison: Citrix versus OpenVPN. Each row gives the metric, Citrix’s count on the left and OpenVPN’s count on the right.
CitrixMetricOpenVPN
23Total CVEs34
8Critical6
13High21
2Medium7
0Low0
15Open in latest29
02

Risk profile

Each severity band as a share of the vendor's own total — strips out raw volume so the profiles compare directly.

Citrix

34.8% critical
Critical
834.8%
High
1356.5%
Medium
28.7%
Low
00.0%

OpenVPN

17.6% critical
Critical
617.6%
High
2161.8%
Medium
720.6%
Low
00.0%
03

Recent activity

Latest in-window disclosures per vendor, newest first. Each ID links to its NVD record.

Citrix

Recent CVEs affecting Citrix
CVESeverityCVSSPublished
CVE-2026-8655(opens NVD record)Critical
9.8
Jun 30, 2026
CVE-2026-8452(opens NVD record)Critical
9.8
Jun 30, 2026
CVE-2026-8451(opens NVD record)High
7.5
Jun 30, 2026
CVE-2026-13474(opens NVD record)High
7.5
Jun 30, 2026
CVE-2026-10817(opens NVD record)High
7.5
Jun 30, 2026
CVE-2026-10816(opens NVD record)High
7.5
Jun 30, 2026

OpenVPN

Recent CVEs affecting OpenVPN
CVESeverityCVSSPublished
CVE-2026-13379(opens NVD record)Critical
9.1
Jul 30, 2026
CVE-2026-13117(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12996(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-12932(opens NVD record)High
8.1
Jul 30, 2026
CVE-2026-11771(opens NVD record)High
7.5
Jul 30, 2026
CVE-2025-3110(opens NVD record)High
7.5
Jul 8, 2026

Track new CVEs for these vendors

Get an email the moment a new vulnerability is disclosed for the products you rely on.

Get alerts