8.7
CVE-2026-13474
- EPSS 0.44%
- Veröffentlicht 30.06.2026 13:17:09
- Zuletzt bearbeitet 02.07.2026 16:55:37
- Quelle 50a63c94-1ea7-4568-8c11-eb79e7
- CVE-Watchlists
- Unerledigt
LoginDenial of service via malformed HTTP/2 requests
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Netscaler Application Delivery Controller SwEditionfips Version < 13.1-37.272
Citrix ≫ Netscaler Application Delivery Controller SwEditionndcpp Version < 13.1-37.272
Citrix ≫ Netscaler Application Delivery Controller SwEdition- Version >= 13.1 < 13.1-63.18
Citrix ≫ Netscaler Application Delivery Controller SwEdition- Version >= 14.1 < 14.1-72.61
Citrix ≫ Netscaler Application Delivery Controller Version14.1-66.68 SwEditionfips
Citrix ≫ NetScaler Gateway Version >= 13.1 < 13.1-63.18
Citrix ≫ NetScaler Gateway Version >= 14.1 < 14.1-72.61
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.44% | 0.353 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5 | 8.7 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-401 Missing Release of Memory after Effective Lifetime
The product does not sufficiently track and release allocated memory after it has been used, making the memory unavailable for reallocation and reuse.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604