Netscaler application delivery controller
This hub aggregates every CVE we track for Netscaler application delivery controller, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.
29
CVEs tracked
11
Critical
13
High
9
In CISA KEV
Severity distribution
HIGH13CRITICAL11MEDIUM5
Monthly trend
2
0
0
0
2
0
0
0
0
0
0
3
0
2
0
0
1
0
0
0
1
0
0
0
2024-072026-06
Latest CVEs
The 15 most recently published vulnerabilities affecting Netscaler application delivery controller.
- CVE-2026-3055Insufficient input validation leading to memory overreadKEV9.8
- CVE-2025-12101Cross-Site Scripting (XSS)8.8
- CVE-2025-7776Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service9.8
- CVE-2025-7775Memory overflow vulnerability leading to Remote Code Execution and/or Denial of ServiceKEV9.8
- CVE-2025-6543Memory overflow vulnerability leading to unintended control flow and Denial of ServiceKEV9.8
- CVE-2025-5349NetScaler ADC and NetScaler Gateway - Improper access control on the NetScaler Management Interface8.8
- CVE-2025-5777NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overreadKEV7.5
- CVE-2024-8535Authenticated user can access unintended user capabilities8.1
- CVE-2024-8534Memory safety vulnerability leading to memory corruption and Denial of Service8.1
- CVE-2024-5492Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites6.1
- CVE-2024-5491Denial of Service7.5
- CVE-2023-6549Improper Restriction of Operations within the Bounds of a Memory Buffer in NetScaler ADC and NetScaler Gateway allows Unauthenticated Denial of Service and Out-Of-Bounds Memory ReadKEV8.2
- CVE-2023-6548Improper Control of Generation of Code ('Code Injection') in NetScaler ADC and NetScaler Gateway allows an attacker with access to NSIP, CLIP or SNIP with management interface to perform Authen...KEV5.5
- CVE-2023-4967Denial of service8.2
- CVE-2023-4966Unauthenticated sensitive information disclosureKEV9.4
Product normalization is registry-driven with AI assist and human review. How it works