Memory Overread Vulnerability in NetScaler ADC and Gateway by Citrix
CVE-2026-10817
6.9MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-10817?
A vulnerability exists in Citrix NetScaler ADC and NetScaler Gateway due to insufficient input validation, particularly when TCP TimeStamp is enabled in the TCP Profile. This flaw can lead to a memory overread condition when associated with certain virtual server types such as Load Balancers (LB), Content Switching (CS), or VPN services. It is essential for users to review their configurations and ensure proper security measures are in place to mitigate potential risks.
Affected Version(s)
ADC 14.1 < 72.61
ADC 13.1 < 63.18
ADC 14.1 FIPS < 72.61
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.