What’s Vulnerable › Products
NetScaler ADC vulnerabilities
27 known vulnerabilities, 9 confirmed exploited in the wild (CISA KEV), 27 published in the last 12 months.
Check whether your NetScaler ADC version is affected
Exploited NetScaler ADC vulnerabilities
- CVE-2026-88779 — Memory overflow vulnerability leading to Denial of Service
- CVE-2026-88772 — Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
- CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
- CVE-2026-19490 — NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
- CVE-2026-8452 — Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
- CVE-2026-3055 — Insufficient input validation leading to memory overread
- CVE-2025-7775 — Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service
- CVE-2025-5777 — NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
- CVE-2025-6543 — Memory overflow vulnerability leading to unintended control flow and Denial of Service
Latest NetScaler ADC vulnerabilities
- CVE-2026-107406 — Memory overflow vulnerability leading to Remote Code Execution or Denial of Service (CVSS 9.5)
- CVE-2026-88779 — Memory overflow vulnerability leading to Denial of Service (CVSS 7.5) — exploited
- CVE-2026-88778 — TCP Initial Sequence Number (ISN) prediction (CVSS 7.5)
- CVE-2026-88777 — Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service (CVSS 9.8)
- CVE-2026-88776 — Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service (CVSS 9.8)
- CVE-2026-88775 — Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service (CVSS 9.8)
- CVE-2026-88773 — HTTP Request Smuggling (CVSS 10.0)
- CVE-2026-88774 — Feature policy bypass due to improper HTTP URL based expression usage (CVSS 7.2)
- CVE-2026-88772 — Memory overflow vulnerability leading to Remote Code Execution or Denial of Service (CVSS 8.1) — exploited
- CVE-2026-88771 — A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands (CVSS 9.8) — exploited
- CVE-2026-19489 — (CVSS 8.8)
- CVE-2026-19490 — NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 (CVSS 9.8) — exploited
- CVE-2026-13474 — Denial of service via malformed HTTP/2 requests (CVSS 7.5)
- CVE-2026-10817 — Insufficient input validation leading to memory overread (CVSS 7.5)
- CVE-2026-10816 — Arbitrary File Read (Unauthenticated) (CVSS 7.5)
- CVE-2026-8655 — Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service (CVSS 9.8)
- CVE-2026-8452 — Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service (CVSS 9.8) — exploited
- CVE-2026-8451 — Insufficient input validation leading to memory overread (CVSS 7.5)
- CVE-2026-4368 — Race Condition leading to User Session Mixup (CVSS 7.7)
- CVE-2026-3055 — Insufficient input validation leading to memory overread (CVSS 9.8) — exploited
- CVE-2025-12101 — Cross-Site Scripting (XSS) (CVSS 5.9)
- CVE-2025-8424 — Improper access control on the NetScaler Management Interface (CVSS 8.7)
- CVE-2025-7776 — Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service (CVSS 9.8)
- CVE-2025-7775 — Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service (CVSS 9.8) — exploited
- CVE-2025-6543 — Memory overflow vulnerability leading to unintended control flow and Denial of Service (CVSS 9.8) — exploited