Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 27/09/2026. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| netscaler application delivery controller | ≥ 13.1, < 13.1-64.23≥ 13.1, < 13.1.37.279≥ 14.1, < 14.1-73.37≥ 14.1-66.68, ≤ 14.1-73.37 | 13.1-64.2313.1.37.27914.1-73.37 |
| netscaler gateway | ≥ 13.1, < 13.1-64.23≥ 14.1, < 14.1-73.37 | 13.1-64.2314.1-73.37 |
Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free