9.8
CVE-2026-8655
- EPSS 0.46%
- Veröffentlicht 30.06.2026 13:19:34
- Zuletzt bearbeitet 01.07.2026 15:52:05
- Quelle 50a63c94-1ea7-4568-8c11-eb79e7
- CVE-Watchlists
- Unerledigt
LoginMultiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service
Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Citrix ≫ Netscaler Application Delivery Controller SwEditionfips Version < 13.1-37.272
Citrix ≫ Netscaler Application Delivery Controller SwEditionndcpp Version < 13.1-37.272
Citrix ≫ Netscaler Application Delivery Controller SwEdition- Version >= 13.1 < 13.1-63.18
Citrix ≫ Netscaler Application Delivery Controller SwEdition- Version >= 14.1 < 14.1-72.61
Citrix ≫ Netscaler Application Delivery Controller Version14.1-66.68 SwEditionfips
Citrix ≫ NetScaler Gateway Version >= 13.1 < 13.1-63.18
Citrix ≫ NetScaler Gateway Version >= 14.1 < 14.1-72.61
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.46% | 0.366 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5 | 8.8 | 0 | 0 |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604