Skip to content
OpenAdvisories

Vendor

NetScaler

26 known vulnerabilities.

Products

ADC 19 Gateway 18 NetScaler Gateway 3 Agent 2 NetScaler ADC 2 Console 2 NetScaler Console 1 SDX 1 SDX (SVM) 1
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.5
    CVE-2026-107406 Public exploit

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:   * For…

    NetScaler ADC Gateway
  • Critical 9.3
    CVE-2026-19490 Exploited Public exploit EPSS 33%

    NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.

    NetScaler ADC Gateway
    KEV Sep 9, 2026
  • High 8.8
    CVE-2026-19489 Public exploit

    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 thr…

    NetScaler ADC Gateway
  • Medium 6.9
    CVE-2026-10817 Public exploit

    Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

    NetScaler ADC Gateway
  • High 8.8
    CVE-2026-8452 Exploited Public exploit

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

    NetScaler ADC Gateway
    KEV Aug 26, 2026
  • High 8.8
    CVE-2026-8451 Public exploit EPSS 14%

    Insufficient input validation leading to memory overread

    Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

    NetScaler ADC Gateway
  • Critical 9.3
    CVE-2026-3055 Exploited Public exploit EPSS 91%

    Insufficient input validation leading to memory overread

    Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread

    NetScaler ADC Gateway
    KEV Mar 30, 2026
  • Medium 5.9
    CVE-2025-12101 Public exploit EPSS 26%

    Cross-Site Scripting (XSS)

    Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
  • Critical 9.2
    CVE-2025-7775 Exploited Public exploit EPSS 21%

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service

    Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server (OR) NetScaler ADC an…

    NetScaler ADC Gateway
    KEV Aug 26, 2025
  • Critical 9.2
    CVE-2025-6543 Exploited Public exploit EPSS 10%

    Memory overflow vulnerability leading to unintended control flow and Denial of Service

    Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jun 30, 2025
  • High 8.7
    CVE-2025-5349 Public exploit

    NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface

    Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway

    NetScaler ADC
  • Critical 9.3
    CVE-2025-5777 Exploited · Ransomware Public exploit EPSS 100%

    NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread

    Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

    NetScaler ADC Gateway
    KEV Jul 10, 2025