IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
6.9Orta

CVE-2026-10817Insufficient input validation leading to memory overread

NetScaler ADC; NetScaler Gateway Yayım: (4 ay önce)

Açıklama

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

Zayıflık türü (CWE): CWE-125

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
citrix netscaler application delivery controller < 13.1-37.272
citrix netscaler gateway 13.1 – < 13.1-63.18
NetScaler ADC 14.1 – < 72.61, 13.1 – < 63.18, 14.1 FIPS – < 72.61, 13.1 FIPS and NDcPP – < 37.272
NetScaler Gateway 14.1 – < 72.61, 13.1 – < 63.18

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (7)
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* < 13.1-37.272
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* < 13.1-37.272
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 13.1 < 13.1-63.18
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 14.1 < 14.1-72.61
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*
  • cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 13.1 < 13.1-63.18
  • cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 14.1 < 14.1-72.61

Aynı üründe son açıklar — Citrix NetScaler ADC / Gateway

8.8Yüksek
CVE-2026-88778

TCP Initial Sequence Number (ISN) prediction

Citrix NetScaler ADC; Citrix NetScaler Gateway

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1…