{"items":[{"id":"CVE-2026-107406","published":"2026-10-08T21:18:08.336Z","updated":"2026-10-10T03:55:21.152Z","title":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service","severity":"CRITICAL","score":9.5,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.01874,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88779","published":"2026-10-04T02:35:35.525Z","updated":"2026-10-05T03:55:38.096Z","title":"Memory overflow vulnerability  leading to Denial of Service","severity":"HIGH","score":8.7,"vendor":"NetScaler","product":"ADC","kev":true,"epss":0.11388,"kevAdded":"2026-10-04","exploit":true},{"id":"CVE-2026-88778","published":"2026-09-27T16:43:16.503Z","updated":"2026-09-29T16:35:06.769Z","title":"TCP Initial Sequence Number (ISN) prediction","severity":"HIGH","score":8.8,"vendor":"Citrix NetScaler","product":"ADC","kev":false,"epss":0.00694,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88777","published":"2026-09-27T16:37:44.345Z","updated":"2026-09-29T21:01:24.942Z","title":"Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service","severity":"HIGH","score":8.8,"vendor":"Citrix NetScaler","product":"ADC","kev":false,"epss":0.00719,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88776","published":"2026-09-27T16:36:40.034Z","updated":"2026-09-29T16:06:45.542Z","title":"Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service","severity":"HIGH","score":8.8,"vendor":"Citrix NetScaler","product":"ADC","kev":false,"epss":0.00834,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88775","published":"2026-09-27T16:21:12.160Z","updated":"2026-09-29T15:15:39.206Z","title":"Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service","severity":"HIGH","score":8.8,"vendor":"Citrix NetScaler","product":"ADC","kev":false,"epss":0.00719,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88773","published":"2026-09-27T16:20:08.382Z","updated":"2026-09-29T15:21:44.819Z","title":"HTTP Request Smuggling","severity":"CRITICAL","score":9.3,"vendor":"Citrix NetScaler","product":"ADC","kev":false,"epss":0.03081,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88774","published":"2026-09-27T16:14:02.993Z","updated":"2026-09-29T15:24:29.082Z","title":"Feature policy bypass due to improper HTTP URL based expression usage","severity":"HIGH","score":7,"vendor":"Citrix NetScaler","product":"ADC","kev":false,"epss":0.00395,"kevAdded":null,"exploit":false},{"id":"CVE-2026-88772","published":"2026-09-27T16:09:56.033Z","updated":"2026-09-28T03:55:42.777Z","title":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service","severity":"CRITICAL","score":9.5,"vendor":"Citrix NetScaler","product":"ADC","kev":true,"epss":0.76566,"kevAdded":"2026-09-27","exploit":true},{"id":"CVE-2026-88771","published":"2026-09-27T16:02:07.001Z","updated":"2026-09-29T03:55:15.090Z","title":"A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands","severity":"CRITICAL","score":9.5,"vendor":"Citrix NetScaler","product":"ADC","kev":true,"epss":0.81894,"kevAdded":"2026-09-27","exploit":true},{"id":"CVE-2026-19490","published":"2026-08-19T12:54:39.730Z","updated":"2026-10-07T18:01:17.320Z","title":"NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490","severity":"CRITICAL","score":9.3,"vendor":"NetScaler","product":"ADC","kev":true,"epss":0.32653,"kevAdded":"2026-09-09","exploit":true},{"id":"CVE-2026-19489","published":"2026-08-19T12:45:16.660Z","updated":"2026-08-20T13:36:36.529Z","title":"Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through…","severity":"HIGH","score":8.8,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.00428,"kevAdded":null,"exploit":false},{"id":"CVE-2026-13474","published":"2026-06-30T13:03:40.967Z","updated":"2026-06-30T13:27:27.938Z","title":"Denial of service via malformed HTTP/2 requests","severity":"HIGH","score":8.7,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.00556,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10817","published":"2026-06-30T12:58:38.850Z","updated":"2026-06-30T13:28:19.305Z","title":"Insufficient input validation leading to memory overread","severity":"MEDIUM","score":6.9,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2026-10816","published":"2026-06-30T12:52:14.461Z","updated":"2026-06-30T13:28:45.455Z","title":"Arbitrary File Read (Unauthenticated)","severity":"HIGH","score":7.1,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.00578,"kevAdded":null,"exploit":false},{"id":"CVE-2026-8655","published":"2026-06-30T12:46:28.140Z","updated":"2026-06-30T13:33:48.823Z","title":"Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service","severity":"HIGH","score":8.8,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.00631,"kevAdded":null,"exploit":false},{"id":"CVE-2026-8452","published":"2026-06-30T12:41:07.622Z","updated":"2026-08-27T03:56:34.886Z","title":"Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service","severity":"HIGH","score":8.8,"vendor":"NetScaler","product":"ADC","kev":true,"epss":0.01011,"kevAdded":"2026-08-26","exploit":true},{"id":"CVE-2026-8451","published":"2026-06-30T12:33:08.999Z","updated":"2026-06-30T13:43:41.903Z","title":"Insufficient input validation leading to memory overread","severity":"HIGH","score":8.8,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.1424,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3055","published":"2026-03-23T20:21:27.107Z","updated":"2026-03-31T03:55:32.569Z","title":"Insufficient input validation leading to memory overread","severity":"CRITICAL","score":9.3,"vendor":"NetScaler","product":"ADC","kev":true,"epss":0.91491,"kevAdded":"2026-03-30","exploit":true},{"id":"CVE-2026-4368","published":"2026-03-23T20:09:44.971Z","updated":"2026-05-10T13:00:44.656Z","title":"Race Condition leading to User Session Mixup","severity":"HIGH","score":7.7,"vendor":"NetScaler","product":"ADC","kev":false,"epss":0.03442,"kevAdded":null,"exploit":false}]}