NetScaler Gateway vulnerabilities

24 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Latest NetScaler Gateway vulnerabilities

CVE-2026-107406 — Memory overflow vulnerability leading to Remote Code Execution or Denial of Service (CVSS 9.5)
CVE-2026-19489 — (CVSS 8.8)
CVE-2026-4368 — Race Condition leading to User Session Mixup (CVSS 7.7)
CVE-2025-12101 — Cross-Site Scripting (XSS) (CVSS 5.9)
CVE-2025-8424 — Improper access control on the NetScaler Management Interface (CVSS 8.7)
CVE-2023-24488 — Cross site scripting (CVSS 6.1)
CVE-2023-24487 — Arbitrary file read (CVSS 7.5)
CVE-2022-27508 — Unauthenticated denial of service (CVSS 7.5)
CVE-2022-27507 — Authenticated denial of service (CVSS 6.5)
CVE-2019-18177 — (CVSS 6.5)
CVE-2022-27516 — User login brute force protection functionality bypass (CVSS 9.8)
CVE-2022-27513 — Remote desktop takeover via phishing (CVSS 9.6)
CVE-2022-27510 — Unauthorized access to Gateway user capabilities (CVSS 9.8)
CVE-2022-27509 — Unauthenticated redirection to a malicious website (CVSS 6.1)
CVE-2021-22956 — (CVSS 7.5)
CVE-2021-22955 — (CVSS 7.5)
CVE-2021-22927 — (CVSS 8.1)
CVE-2021-22920 — (CVSS 6.5)
CVE-2021-22919 — (CVSS 7.5)
CVE-2020-8300 — (CVSS 6.5)
CVE-2020-8299 — (CVSS 6.5)
CVE-2020-8247 — (CVSS 8.8)
CVE-2020-8246 — (CVSS 7.5)
CVE-2020-8245 — (CVSS 6.1)