Summary
Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service.
- Vendor
- Citrix
- Product
- NetScaler
- Added to KEV
- Oct 4, 2026
- Remediation due
- Oct 7, 2026 (US federal deadline)
- Ransomware use
- Not known
- Weakness
- CWE-119
- EPSS
- 11.4% as of Nov 10
In the news · last mention Oct 12
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References