# cve.now: Netscaler

The newest entries naming Netscaler as an affected vendor (up to 200), of 26 in all, 7 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-107406](https://cve.now/CVE-2026-107406.md): Memory overflow vulnerability leading to Remote Code Execution or Denial of Service (CVSS 9.5)
- [CVE-2026-88779](https://cve.now/CVE-2026-88779.md): Memory overflow vulnerability leading to Denial of Service (CVSS 8.7, KEV)
- [CVE-2026-19490](https://cve.now/CVE-2026-19490.md): NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 (CVSS 9.3, KEV)
- [CVE-2026-19489](https://cve.now/CVE-2026-19489.md): Vulnerability in NetScaler ADC and NetScaler Gateway. (CVSS 8.8)
- [CVE-2026-13474](https://cve.now/CVE-2026-13474.md): Denial of service via malformed HTTP/2 requests (CVSS 8.7)
- [CVE-2026-10817](https://cve.now/CVE-2026-10817.md): Insufficient input validation leading to memory overread (CVSS 6.9)
- [CVE-2026-10816](https://cve.now/CVE-2026-10816.md): Arbitrary File Read (Unauthenticated) (CVSS 7.1)
- [CVE-2026-8655](https://cve.now/CVE-2026-8655.md): Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service (CVSS 8.8)
- [CVE-2026-8452](https://cve.now/CVE-2026-8452.md): Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service (CVSS 8.8, KEV)
- [CVE-2026-8451](https://cve.now/CVE-2026-8451.md): Insufficient input validation leading to memory overread (CVSS 8.8)
- [CVE-2026-3055](https://cve.now/CVE-2026-3055.md): Insufficient input validation leading to memory overread (CVSS 9.3, KEV)
- [CVE-2026-4368](https://cve.now/CVE-2026-4368.md): Race Condition leading to User Session Mixup (CVSS 7.7)
- [CVE-2025-12101](https://cve.now/CVE-2025-12101.md): Cross-Site Scripting (XSS) (CVSS 5.9)
- [CVE-2025-8424](https://cve.now/CVE-2025-8424.md): Improper access control on the NetScaler Management Interface (CVSS 8.7)
- [CVE-2025-7776](https://cve.now/CVE-2025-7776.md): Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service (CVSS 8.8)
- [CVE-2025-7775](https://cve.now/CVE-2025-7775.md): Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service (CVSS 9.2, KEV)
- [CVE-2025-6543](https://cve.now/CVE-2025-6543.md): Memory overflow vulnerability leading to unintended control flow and Denial of Service (CVSS 9.2, KEV)
- [CVE-2025-4365](https://cve.now/CVE-2025-4365.md): NetScaler Console and NetScaler SDX (SVM) - Arbitrary file read (CVSS 6.9)
- [CVE-2025-5349](https://cve.now/CVE-2025-5349.md): NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface (CVSS 8.7)
- [CVE-2025-5777](https://cve.now/CVE-2025-5777.md): NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread (CVSS 9.3, KEV)
- [CVE-2024-12284](https://cve.now/CVE-2024-12284.md): Authenticated privilege escalation (CVSS 8.8)
- [CVE-2024-8535](https://cve.now/CVE-2024-8535.md): Authenticated user can access unintended user capabilities (CVSS 5.8)
- [CVE-2024-8534](https://cve.now/CVE-2024-8534.md): Memory safety vulnerability leading to memory corruption and Denial of Service (CVSS 8.4)
- [CVE-2024-6236](https://cve.now/CVE-2024-6236.md): Denial of Service (CVSS 7.1)
- [CVE-2024-6235](https://cve.now/CVE-2024-6235.md): Sensitive information disclosure (CVSS 9.4)
- [CVE-2024-5491](https://cve.now/CVE-2024-5491.md): Denial of Service (CVSS 7.2)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/netscaler
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.