CVE-2026-10817

6.9 mediumEPSS 0.6%

Medium (6.9) in citrix. EPSS 0.6% chance of exploitation in the next 30 days.

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-125
Published: 2026-06-30
Modified: 2026-07-02
Record from: the NVD, synced 2026-10-19

Affected

citrix:netscaler_application_delivery_controller
citrix:netscaler_gateway

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

Check your stack JSON