Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Citrix has released security updates to address six vulnerabilities in NetScaler ADC and NetScaler Gateway, including flaws that could allow arbitrary file…
Tag: NetScaler
CVE-2026-8451: Citrix NetScaler SAML IDP Memory Overread Vulnerability
An insufficient input validation vulnerability in Citrix NetScaler ADC and Gateway when configured as a SAML IDP, leading to memory overread. CVSS…
CVE-2026-8452: Citrix NetScaler Gateway Memory Overflow DoS Vulnerability
A memory overflow vulnerability in Citrix NetScaler ADC and Gateway when configured as a Gateway or AAA virtual server, leading to denial-of-service.…
CVE-2026-8655: Citrix NetScaler ADC Multiple Memory Overflow DoS Vulnerabilities
Multiple memory overflow vulnerabilities in Citrix NetScaler ADC when configured as an LB of type Oracle, DNS Proxy, or DNS recursive resolver,…
CVE-2026-10816: Citrix NetScaler Unauthenticated Arbitrary File Read Vulnerability
An external control of file name vulnerability in Citrix NetScaler ADC and Gateway allowing unauthenticated arbitrary file read when management access is…
CVE-2026-10817: Citrix NetScaler TCP TimeStamp Memory Overread Vulnerability
An insufficient input validation vulnerability in Citrix NetScaler ADC and Gateway when TCP TimeStamp is enabled, leading to memory overread. CVSS score…
CVE-2026-13474: Citrix NetScaler HTTP/2 Denial-of-Service Vulnerability
A missing release of memory after effective lifetime vulnerability in Citrix NetScaler ADC and Gateway via malformed HTTP/2 requests, leading to denial-of-service.…
CVE-2025-5777 (Citrix Bleed 2): Exploited for DragonForce Ransomware Deployment
CVE-2025-5777, known as Citrix Bleed 2, is being exploited by threat actors to deploy DragonForce ransomware. Attackers follow a consistent post-compromise pattern…