Description
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NetScaler | ADC | 14.1 – < 72.61, 13.1 – < 63.18, 14.1 FIPS – < 72.61, 13.1 FIPS and NDcPP – < 37.272 | 72.61 |
| NetScaler | Gateway | 14.1 – < 72.61, 13.1 – < 63.18 | 72.61 |
Advisories 2
- WID-SEC-2026-2147 Citrix Systems NetScaler ADC und Gateway: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 26, 2026
- NCSC-2026-0216 Kwetsbaarheden verholpen in Citrix Netscaler ADC en Netscaler Gateway NCSC-NL (Netherlands) · Aug 18, 2026