Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-06-30 | 1 | Disclosure1 |
| 2026-07-01 | 2 | Patch2 |
| 2026-07-04 | 2 | Patch2 |
| 2026-07-08 | 1 | Patch1 |
| 2026-09-13 | 1 | Patch1 |
🚨🚨🚨 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474 https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604
Post summary
The message announces Citrix NetScaler ADC and Gateway security bulletins for multiple CVEs and provides a link to the vendor’s support page for further information.
#NetSec #Offensive_security I’ll hack you via a SYN packet, OFFZONE 2026. http://www.cyberpocket.org // CVE-2026-10817 in the TCP stack of NetScaler ADC and Gateway. Yes, attackers can leak decrypted data via a truncated TCP timestamp ]-> NetScaler NSE script https://github.com/msuhanov/nse/blob/main/netscaler-id.nse ]-> Various scripts to triage compromised systems (Linux, ESXi, FreeBSD/NetScaler) https://github.com/msuhanov/easy_triage
🚨🚨🚨@cloudsoftware has just issued a security bulletin for @NetScaler 🚨🚨🚨 Severity: *** HIGH *** CVE: CVE-2026-8451 / CVE-2026-8452 / CVE-2026-8655 / CVE-2026-10816 / CVE-2026-10817 / CVE-2026-13474 For more information: https://mailinglist.corelayer.eu/archive/netscaler-security-bulletin-8936
Post summary
CloudSoftware issued a high‑severity security bulletin for NetScaler, listing multiple CVEs and providing a link to a mailing list for further details.
Citrix NetScaler ADC／Gateway に 6件の脆弱性：メモリ範囲外読み取りと DoS 攻撃の恐れ https://iototsecnews.jp/2026/07/01/citrix-netscaler-adc-and-gateway-flaws-let-attackers-trigger-memory-overread-and-denial-of-service/ 今回の脆弱性は、入力値に対する不十分な検証や、メモリ処理におけるエラーなどが原因となって発生しています。 具体的には CVE-2026-8451／CVE-2026-10817 のようにメモリの範囲外読み取りを引き起こすものや、 CVE-2026-8452／CVE-2026-8655 のようにメモリオーバーフローを招くものがあります。また、認証なしで任意のファイルが読み取れてしまう CVE-2026-10816 や、不適切なメモリ処理によりリソースが枯渇する CVE-2026-13474 も存在します。 コンフィグやプロファイルが有効な場合に悪用される危険があるため、該当するシステムへの迅速なアップデートに加えて設定の変更が必要です。ご利用のチームは、ご注意ください。 #Citrix #NetScalerADC #Vulnerability
Post summary
Citrix NetScaler ADC/Gateway suffers from several memory‑related and authentication bypass vulnerabilities, forcing the release of patches and configuration updates to protect affected systems.
🚨 New vulnerabilities reported: CVE-2026-10817 in NetScaler ADC and Gateway, and CVE-2026-83548 in SonicWall SMA1000. Patch now to prevent exploitation! #CyberSecurity #VulnerabilityManagement #PatchNow https://pranithjain.qzz.io/threatintel/social/firehose?tab=reddit
Post summary
The tweet announces two CVEs and urges immediate patching, with no details on exploit code, active exploitation, or technical vulnerability characteristics.
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474 http://dlvr.it/TTM12f #patchmanagement
Post summary
The tweet announces a NetScaler security bulletin covering multiple CVEs, indicating that vendor patches are available, but provides no PoC, exploit details, or evidence of active exploitation.
Citrix has recently released new updates to fix NetScaler ADC and NetScaler Gateway, where attackers would be able to conduct file reads and/or trigger a Denial-of-Service condition. These updates resolves the following CVEs: -> CVE-2026-8451 -> CVE-2026-8452 -> CVE-2026-8655 -> CVE-2026-10816 -> CVE-2026-10817 -> CVE-2026-13474 Details can be found in the article below. #Cybersecurity #Ransomware #Citrix #CVE #Netscaler https://thehackernews.com/2026/07/citrix-patches-six-netscaler-flaws.html
Post summary
Citrix has issued patches for six NetScaler vulnerabilities that could allow attackers to read files or cause denial‑of‑service conditions.
🚨 6 high-severity Citrix NetScaler flaws - CVE-2026-8451 - CVE-2026-8452 - CVE-2026-8655 - CVE-2026-10816 - CVE-2026-10817 - CVE-2026-13474 All six stem from improper memory handling/input validation, enabling DoS and memory overflow. Fixes: - 14.1 → upgrade to 14.1-72.61+ - 13.1 → upgrade to 13.1-63.18+ - FIPS builds → upgrade to corresponding secure versions
Post summary
The tweet lists six high‑severity Citrix NetScaler CVEs, details them as memory handling flaws leading to DoS and memory overflow, and provides the specific upgrade paths to mitigate the vulnerabilities.
5 of 5 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | citrix | netscaler_application_delivery_controller | - | - | - |
| App | citrix | netscaler_application_delivery_controller | - | - | - |
| App | citrix | netscaler_application_delivery_controller | - | - | - |
| App | citrix | netscaler_application_delivery_controller | 14.1-66.68 | - | - |
| App | citrix | netscaler_gateway | - | - | - |