CVE-2026-10816
Arbitrary File Read (Unauthenticated)
At a glance Severity HIGH 7.1 EPSS EPSS 0.58 % · percentile 47 (2026-10-27) State PUBLISHED Published 2026-06-30 Updated 2026-06-30 Assigner NetScaler NVD status Analyzed Description Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled
Scores Version Score Vector Scored by CVSS 4.0 HIGH 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N NetScaler CVSS 4.0 HIGH 7.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X NVD · 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5 (Secondary) CVSS 3.1 HIGH 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* < 13.1-37.272cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* < 13.1-37.272cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 13.1 < 13.1-63.18cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 14.1 < 14.1-72.61cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 13.1 < 13.1-63.18cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 14.1 < 14.1-72.61Affected products Product Versions NetScaler · ADC affected 14.1 < 72.61 ; affected 13.1 < 63.18 ; affected 14.1 FIPS < 72.61 ; affected 13.1 FIPS and NDcPP < 37.272 NetScaler · Gateway affected 14.1 < 72.61 ; affected 13.1 < 63.18
References
Sources
