Citrix Products Multiple Vulnerabilities
Release Date: 3 Jul 2026
RISK: High Risk
TYPE: Operating Systems - Networks OS
Multiple vulnerabilities were identified in Citrix Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and sensitive information disclosure on the targeted system.
Note:
CVE-2026-8451 is being exploited in the wild. The vulnerability is caused by insufficient input validation leading to memory overread. NetScaler ADC or NetScaler Gateway must be configured as a SAML IDP to be vulnerable. Hence, the risk level is rated as High Risk.
Impact
- Information Disclosure
- Denial of Service
System / Technologies affected
- NetScaler ADC and NetScaler Gateway 14.1 BEFORE 14.1-72.61
- NetScaler ADC and NetScaler Gateway 13.1 BEFORE 13.1-63.18
- NetScaler ADC FIPS BEFORE 14.1-72.61 FIPS
- NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.272
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
沒有留言:
發佈留言