Netscaler vulnerabilities
26 CVEs and advisories name Netscaler as an affected vendor, 7 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-107406Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
- CVE-2026-88779Memory overflow vulnerability leading to Denial of Service
- CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
- CVE-2026-19489Vulnerability in NetScaler ADC and NetScaler Gateway.
- CVE-2026-13474Denial of service via malformed HTTP/2 requests
- CVE-2026-10817Insufficient input validation leading to memory overread
- CVE-2026-10816Arbitrary File Read (Unauthenticated)
- CVE-2026-8655Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service
- CVE-2026-8452Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
- CVE-2026-8451Insufficient input validation leading to memory overread
- CVE-2026-3055Insufficient input validation leading to memory overread
- CVE-2026-4368Race Condition leading to User Session Mixup
- CVE-2025-12101Cross-Site Scripting (XSS)
- CVE-2025-8424Improper access control on the NetScaler Management Interface
- CVE-2025-7776Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
- CVE-2025-7775Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
- CVE-2025-6543Memory overflow vulnerability leading to unintended control flow and Denial of Service
- CVE-2025-4365NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read
- CVE-2025-5349NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface
- CVE-2025-5777NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
- CVE-2024-12284Authenticated privilege escalation
- CVE-2024-8535Authenticated user can access unintended user capabilities
- CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of Service
- CVE-2024-6236Denial of Service
- CVE-2024-6235Sensitive information disclosure
- CVE-2024-5491Denial of Service