CVE-2026-10817 — Insufficient input validation leading to memory overread

CVE-2026-10817

Insufficient input validation leading to memory overread PUBLISHED

Description (CNA)

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

Affected (CNA)

Vendor / product	Versions
NetScaler / ADC	affected 14.1 before 72.61; affected 13.1 before 63.18; affected 14.1 FIPS before 72.61; affected 13.1 FIPS and NDcPP before 37.272
NetScaler / Gateway	affected 14.1 before 72.61; affected 13.1 before 63.18

CWE

CWE-125

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.