NetScaler Gateway
18 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-107406 | < 14.1-73.46 ; < 13.1-64.29 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service | CRITICAL 9.5 | 1.9 % | ||
| CVE-2026-88779 | < 14.1-73.41 ; < 13.1-64.28 | Memory overflow vulnerability leading to Denial of Service | HIGH 8.7 | 11 % | KEV | |
| CVE-2026-19490 | 14.1 – 73.32 ; 13.1 – 63.21 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 | CRITICAL 9.3 | 33 % | KEV | |
| CVE-2026-19489 | 14.1 – 73.32 ; 13.1 – 63.21 | Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: | HIGH 8.8 | 0.4 % | ||
| CVE-2026-13474 | 14.1 – < 72.61 ; 13.1 – < 63.18 | Denial of service via malformed HTTP/2 requests | HIGH 8.7 | 0.6 % | ||
| CVE-2026-10817 | 14.1 – < 72.61 ; 13.1 – < 63.18 | Insufficient input validation leading to memory overread | MEDIUM 6.9 | 0.6 % | ||
| CVE-2026-10816 | 14.1 – < 72.61 ; 13.1 – < 63.18 | Arbitrary File Read (Unauthenticated) | HIGH 7.1 | 0.6 % | ||
| CVE-2026-8655 | 14.1 – < 72.61 ; 13.1 – < 63.18 | Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service | HIGH 8.8 | 0.6 % | ||
| CVE-2026-8452 | 14.1 – < 72.61 ; 13.1 – < 63.18 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service | HIGH 8.8 | 1.0 % | KEV | |
| CVE-2026-8451 | 14.1 – < 72.61 ; 13.1 – < 63.18 | Insufficient input validation leading to memory overread | HIGH 8.8 | 0.5 % | ||
| CVE-2026-3055 | 14.1 – < 66.59 ; 13.1 – < 62.23 | Insufficient input validation leading to memory overread | CRITICAL 9.3 | 91 % | KEV | |
| CVE-2026-4368 | 14.1.66.54 | Race Condition leading to User Session Mixup | HIGH 7.7 | 3.4 % | ||
| CVE-2025-12101 | 14.1 – < 56.73 ; 13.1 – < 60.32 ; 13.1-FIPS and NDcPP – < 37.250 ; … | Cross-Site Scripting (XSS) | MEDIUM 5.9 | 26 % | ||
| CVE-2025-8424 | 14.1 – < 47.48 ; 13.1 – < 59.22 ; 13.1 FIPS and NDcPP – < 37.241 ; … | Improper access control on the NetScaler Management Interface | HIGH 8.7 | 3.7 % | ||
| CVE-2025-7776 | 14.1 – < 47.48 ; 13.1 – < 59.22 ; 13.1 FIPS and NDcPP – < 37.241 ; … | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service | HIGH 8.8 | 9.1 % | ||
| CVE-2025-7775 | 14.1 – < 47.48 ; 13.1 – < 59.22 ; 13.1 FIPS and NDcPP – < 37.241 ; … | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service | CRITICAL 9.2 | 21 % | KEV | |
| CVE-2025-6543 | 14.1 – < 47.46 ; 13.1 – < 59.19 ; 13.1 FIPS and NDcPP – < 37.236 | Memory overflow vulnerability leading to unintended control flow and Denial of Service | CRITICAL 9.2 | 10 % | KEV | |
| CVE-2025-5777 | 14.1 – < 43.56 ; 13.1 – < 58.32 | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread | CRITICAL 9.3 | 100 % | KEV |