Citrix NetScaler Out-of-Bounds Read Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 30/03/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 13.1, < 13.1-37.262≥ 13.1, < 13.1-62.23≥ 14.1, < 14.1-60.58 | 13.1-37.26213.1-62.2314.1-60.58 |
| netscaler gateway | ≥ 13.1, < 13.1-62.23≥ 14.1, < 14.1-60.58 | 13.1-62.2314.1-60.58 |
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free