← CVE Intelligence

CVE-2026-13474

Denial of service via malformed HTTP/2 requests PUBLISHED

Description (CNA)

Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

Affected (CNA)

Vendor / productVersions
NetScaler / ADCaffected 14.1 before 72.61; affected 13.1 before 63.18; affected 14.1 FIPS before 72.61; affected 13.1 FIPS and NDcPP before 37.272
NetScaler / Gatewayaffected 14.1 before 72.61; affected 13.1 before 63.18

CWE

CWE-401

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.