IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
8.8Yüksek

CVE-2026-8451Insufficient input validation leading to memory overread

NetScaler ADC; NetScaler Gateway Yayım: (4 ay önce)

Açıklama

Insufficient input validation in NetScaler ADC and NetScaler Gateway leading to memory overread if NetScaler ADC or NetScaler Gateway is configured as a SAML IDP

Zayıflık türü (CWE): CWE-125

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
citrix netscaler application delivery controller < 13.1-37.272
citrix netscaler gateway 13.1 – < 13.1-63.18
NetScaler ADC 14.1 – < 72.61, 13.1 – < 63.18, 14.1 FIPs – < 72.61, 13.1 FIPS and NDcPP – < 37.272
NetScaler Gateway 14.1 – < 72.61, 13.1 – < 63.18

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (7)
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:* < 13.1-37.272
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:* < 13.1-37.272
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 13.1 < 13.1-63.18
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:* ≥ 14.1 < 14.1-72.61
  • cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*
  • cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 13.1 < 13.1-63.18
  • cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:* ≥ 14.1 < 14.1-72.61

Aynı üründe son açıklar — Citrix NetScaler ADC / Gateway

8.8Yüksek
CVE-2026-88778

TCP Initial Sequence Number (ISN) prediction

Citrix NetScaler ADC; Citrix NetScaler Gateway

Predictable exact value from previous values vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1…