9.8
CVE-2026-8452
- EPSS 0.49%
- Veröffentlicht 30.06.2026 13:19:33
- Zuletzt bearbeitet 01.07.2026 15:52:28
- Quelle 50a63c94-1ea7-4568-8c11-eb79e7
- CVE-Watchlists
- Unerledigt
Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service
Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Netscaler Application Delivery Controller SwEditionfips Version < 13.1-37.272
Citrix ≫ Netscaler Application Delivery Controller SwEditionndcpp Version < 13.1-37.272
Citrix ≫ Netscaler Application Delivery Controller SwEdition- Version >= 13.1 < 13.1-63.18
Citrix ≫ Netscaler Application Delivery Controller SwEdition- Version >= 14.1 < 14.1-72.61
Citrix ≫ Netscaler Application Delivery Controller Version14.1-66.68 SwEditionfips
Citrix ≫ NetScaler Gateway Version >= 13.1 < 13.1-63.18
Citrix ≫ NetScaler Gateway Version >= 14.1 < 14.1-72.61
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.383 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5 | 8.8 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604