Multiple high-severity vulnerabilities have been identified in Citrix NetScaler ADC and NetScaler Gateway, exposing affected systems to denial-of-service (DoS) and memory overflow attacks.
The issues, tracked under CVE-2026-8451, CVE-2026-8452, CVE-2026-8655, CVE-2026-10816, CVE-2026-10817, and CVE-2026-13474, were disclosed in a security bulletin published on June 30, 2026.
According to Cloud Software Group, the vulnerabilities impact multiple supported versions of NetScaler ADC and Gateway appliances.
These include NetScaler ADC and Gateway versions 14.1 before 14.1-72.61 and 13.1 before 13.1-63.18. Additionally, NetScaler ADC FIPS versions before 14.1-72.61 FIPS and 13.1-37.272 are also affected.
Citrix NetScaler ADC and Gateway Vulnerabilities
Organizations running Secure Private Access Hybrid deployments using NetScaler instances are equally at risk and are advised to upgrade immediately. The vulnerabilities stem from improper memory handling and insufficient input validation within the affected systems.
Attackers can exploit these flaws to trigger memory overflow conditions, potentially leading to service crashes or resource exhaustion.
In practical scenarios, this may allow unauthenticated attackers to disrupt critical network services by sending specially crafted requests to vulnerable endpoints.
Security researchers highlight that such vulnerabilities are particularly dangerous in edge devices like NetScaler ADC and Gateway, which are commonly deployed as load balancers, VPN gateways, and application delivery controllers.
A successful denial-of-service attack on these systems can result in widespread service outages, affecting enterprise applications, remote access infrastructure, and customer-facing services.
While there is no public evidence of active exploitation at the time of disclosure, the high severity rating indicates a significant risk if left unpatched.
Threat actors often target network edge appliances due to their exposure to the internet and their critical role in enterprise environments. Similar vulnerabilities in the past have been rapidly weaponized following public disclosure.
Citrix has released patched versions to address these vulnerabilities. Users are strongly recommended to upgrade to NetScaler ADC and Gateway 14.1-72.61 or later, and 13.1-63.18 or later.
FIPS and NDcPP builds should also be updated to the corresponding secure versions. Applying these updates ensures that underlying memory-handling issues are corrected and attack vectors are mitigated.
Organizations should note that Security Bulletin CTX696604 applies only to customer-managed NetScaler deployments.
Cloud Software Group has already updated citrix-managed cloud services and Adaptive Authentication platforms. However, organizations managing their own infrastructure must take immediate action to secure their environments.
As a best practice, security teams should also monitor logs for unusual traffic patterns, unexpected service crashes, or repeated connection attempts, which may indicate exploitation attempts.
Network segmentation and rate limiting can further reduce the risk of successful denial-of-service attacks.
Given the critical role of NetScaler devices in enterprise networks, timely patching and proactive monitoring are essential to prevent service disruption and maintain operational continuity.
