What is CVE-2026-10817?

CVE-2026-10817 is a high-severity vulnerability in Citrix Netscaler Application Delivery Controller, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2026-06-30.

How severe is CVE-2026-10817?

High severity. CVSS v3 base score is 7.5 out of 10.

Out-of-bounds Read in Citrix Netscaler Application Delivery Controller

CVE-2026-10817

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

Vulnerability class: Buffer Overflow

EPSS: 0.004 (33.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Citrix Netscaler_application_delivery_controller — versions 14.1-66.68
Citrix Netscaler_gateway
Netscaler Adc — versions 14.1, 13.1, 14.1 FIPS
Netscaler Gateway — versions 14.1, 13.1

Weakness classification (CWE)

CWE-125 — Out-of-bounds Read

References

50a63c94-1ea7-4568-8c11-eb79e7c5a2b5 (Vendor Advisory)

Frequently asked questions

What is CVE-2026-10817?: CVE-2026-10817 is a high-severity vulnerability in Citrix Netscaler Application Delivery Controller, classified under Out-of-bounds Read. CVSS score: 7.5/10. Published 2026-06-30.
How severe is CVE-2026-10817?: High severity. CVSS v3 base score is 7.5 out of 10.