Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 26/08/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | = 14.1-66.68≥ 13.1, < 13.1-63.18≥ 14.1, < 14.1-72.61< 13.1-37.272 | 13.1-63.1814.1-72.6113.1-37.272 |
| netscaler gateway | ≥ 13.1, < 13.1-63.18≥ 14.1, < 14.1-72.61 | 13.1-63.1814.1-72.61 |
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free