Advisories · Technology

NetScaler Gateway.

Every CVE that names NetScaler Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-107406 CVE record

CVSS 9.5 CriticalCritical · CVSS 9+

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 8 Oct 2026
CVE-2026-88779 CVE record

CVSS 8.7 HighCritical · KEV, CVSS 7+ and EPSSKEV

Memory overflow vulnerability leading to Denial of Service
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 4 Oct 2026
CVE-2026-19490 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
- NetScaler ADC
- NetScaler Gateway
- Authentication bypass
Not analysed yet 19 Aug 2026
CVE-2026-19489 CVE record

CVSS 8.8 High

Buffer overflow in NetScaler ADC and others
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 19 Aug 2026
CVE-2026-13474 CVE record

CVSS 8.7 High

Denial of service via malformed HTTP/2 requests
- NetScaler ADC
- NetScaler Gateway
- Denial of service
Not analysed yet 30 Jun 2026
CVE-2026-10817 CVE record

CVSS 6.9 Medium

Insufficient input validation leading to memory overread
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 30 Jun 2026
CVE-2026-10816 CVE record

CVSS 7.1 High

Arbitrary File Read (Unauthenticated)
- NetScaler ADC
- NetScaler Gateway
- Path traversal
Not analysed yet 30 Jun 2026
CVE-2026-8655 CVE record

CVSS 8.8 High

Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 30 Jun 2026
CVE-2026-8452 CVE record

CVSS 8.8 HighCritical · KEVKEV

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 30 Jun 2026
CVE-2026-8451 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Insufficient input validation leading to memory overread
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 30 Jun 2026
CVE-2026-3055 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Insufficient input validation leading to memory overread
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 23 Mar 2026
CVE-2026-4368 CVE record

CVSS 7.7 High

Race Condition leading to User Session Mixup
- NetScaler ADC
- NetScaler Gateway
- Race condition
Not analysed yet 23 Mar 2026
CVE-2025-12101 CVE record

CVSS 5.9 Medium

Cross-Site Scripting (XSS)
- NetScaler ADC
- NetScaler Gateway
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2025
CVE-2025-8424 CVE record

CVSS 8.7 High

Improper access control on the NetScaler Management Interface
- NetScaler ADC
- NetScaler Gateway
- CWE-1284
Not analysed yet 26 Aug 2025
CVE-2025-7776 CVE record

CVSS 8.8 High

Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-7775 CVE record

CVSS 9.2 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 26 Aug 2025
CVE-2025-6543 CVE record

CVSS 9.2 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Memory overflow vulnerability leading to unintended control flow and Denial of Service
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 25 Jun 2025
CVE-2025-5777 CVE record

CVSS 9.3 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
- NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 17 Jun 2025
CVE-2024-8535 CVE record

CVSS 5.8 Medium

Authenticated user can access unintended user capabilities
- NetScaler ADC
- NetScaler Gateway
- Information disclosure
Not analysed yet 12 Nov 2024
CVE-2024-8534 CVE record

CVSS 8.4 High

Memory safety vulnerability leading to memory corruption and Denial of Service
- NetSclaer NetScaler ADC
- NetScaler Gateway
- Memory corruption
Not analysed yet 12 Nov 2024
CVE-2024-5491 CVE record

CVSS 7.2 High

Denial of Service
- NetScaler ADC
- NetScaler Gateway
Not analysed yet 10 Jul 2024