Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 04/10/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 13.1, < 13.1-37.282≥ 13.1, < 13.1-64.28≥ 14.1, < 14.1-73.41≥ 14.1-66.68, ≤ 14.1-73.41 | 13.1-37.28213.1-64.2814.1-73.41 |
| netscaler gateway | ≥ 13.1, < 13.1-64.28≥ 14.1, < 14.1-73.41 | 13.1-64.2814.1-73.41 |
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free