NetScaler

NetScaler

CVEs, 365 days2020 all time, 0 rejected
Quality78%median 99%
CVSS by the CNA100%share of records
CWE35%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationNetScaler
RoleCNA
TypeVendor
Reports tomitre
ScopeNetScaler issues only.
Advisorieshttps://support.citrix.com/support-home/topic-article-list?trendingCategory=20&trendingTopicName=Security%20Bulletin
  • CVE-2026-107406 2026-10-08 · CVSS 9.5
    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be
  • CVE-2026-88779 2026-10-04 · CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.
  • CVE-2026-88778 2026-09-27 · CVSS 8.8
    Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, bef
  • CVE-2026-88777 2026-09-27 · CVSS 8.8
    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23,
  • CVE-2026-88776 2026-09-27 · CVSS 8.8
    Memory overflow vulnerability vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23,
  • CVE-2026-88775 2026-09-27 · CVSS 8.8
    Memory overflow vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-7
  • CVE-2026-88773 2026-09-27 · CVSS 9.3
    Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue
  • CVE-2026-88774 2026-09-27 · CVSS 7.0
    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and b
  • CVE-2026-88772 2026-09-27 · CVSS 9.5
    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and b
  • CVE-2026-88771 2026-09-27 · CVSS 9.5
    Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, bef
  • CVE-2026-19490 2026-08-19 · CVSS 9.3
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 7
  • CVE-2026-19489 2026-08-19 · CVSS 8.8
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 7
  • CVE-2026-13474 2026-06-30 · CVSS 8.7
    Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual serv
  • CVE-2026-10817 2026-06-30 · CVSS 6.9
    Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated
  • CVE-2026-10816 2026-06-30 · CVSS 7.1
    Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enab
  • CVE-2026-8655 2026-06-30 · CVSS 8.8
    Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScale
  • CVE-2026-8452 2026-06-30 · CVSS 8.8
    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is confi
  • CVE-2026-8451 2026-06-30 · CVSS 8.8
    Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML ID
  • CVE-2026-3055 2026-03-23 · CVSS 9.3
    Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
  • CVE-2026-4368 2026-03-23 · CVSS 7.7
    Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leadin

All CVE Program partners