⌁ CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2026-13474: Citrix NetScaler HTTP/2 Denial-of-Service Vulnerability

July 1, 2026

A missing release of memory after effective lifetime vulnerability in Citrix NetScaler ADC and Gateway via malformed HTTP/2 requests, leading to denial-of-service. CVSS score 8.7.

Discovered from: Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service