Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-10817

Insufficient input validation leading to memory overread

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NetScaler

Description

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetScaler ADC

Default version status: unaffected

  • 14.1 to < 72.61affected
  • 13.1 to < 63.18affected
  • 14.1 FIPS to < 72.61affected
  • 13.1 FIPS and NDcPP to < 37.272affected

NetScaler Gateway

Default version status: unaffected

  • 14.1 to < 72.61affected
  • 13.1 to < 63.18affected

References