CVEvulnerability

CVE-2026-10817

6.9 MEDIUM Published 2026-06-30 Modified 2026-07-02 Official page ↗
Status
Analyzed
Published
2026-06-30
Last modified
2026-07-02
Assigner
50a63c94-1ea7-4568-8c11-eb79e7c5a2b5
CVSS 4.0 (50a63c94-1ea7-4568-8c11-eb79e7c5a2b5)
6.9 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-125

Description

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

Affected configurations

• citrix netscaler application delivery controller (< 13.1-37.272) • citrix netscaler application delivery controller (>= 13.1 < 13.1-63.18) • citrix netscaler application delivery controller (>= 14.1 < 14.1-72.61) • citrix netscaler application delivery controller 14.1-66.68 • citrix netscaler gateway (>= 13.1 < 13.1-63.18) • citrix netscaler gateway (>= 14.1 < 14.1-72.61)

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References