GA
Product
Gateway
On CISA KEVExploited in the wildRansomware-linked
20
CVEs
7
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 8High 11Medium 1Low 0
Watch
Add Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-19490 In wildKEV | 9.8 | Aug 19 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 Affected: 14.1 through 73.32; 13.1 through 63.21 |
| CVE-2026-8452 In wildKEV | 9.8 | Jun 30 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service Affected: 14.1 before 72.61; 13.1 before 63.18 |
| CVE-2026-3055 In wildKEV | 9.8 | Mar 23 | Insufficient input validation leading to memory overread Affected: 14.1 before 66.59; 13.1 before 62.23 |
| CVE-2025-7775 In wildKEV | 9.8 | Aug 26 | Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service Affected: 14.1 before 47.48; 13.1 before 59.22; 13.1 FIPS and NDcPP before 37.241; 12.1 FIPS and NDcPP before 55.330 |
| CVE-2025-6543 In wildKEV | 9.8 | Jun 25 | Memory overflow vulnerability leading to unintended control flow and Denial of Service Affected: 14.1 before 47.46; 13.1 before 59.19; 13.1 FIPS and NDcPP before 37.236 |
| CVE-2026-88779 In wildKEV | 7.5 | Oct 4 | Memory overflow vulnerability leading to Denial of Service Affected: before 14.1-73.41; before 13.1-64.28 |
| CVE-2025-5777 RansomwareIn wildKEV | 7.5 | Jun 17 | NetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread Affected: 14.1 before 43.56; 13.1 before 58.32 |
| CVE-2026-8655 | 9.8 | Jun 30 | Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service Affected: 14.1 before 72.61; 13.1 before 63.18 |
| CVE-2025-7776 | 9.8 | Aug 26 | Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service Affected: 14.1 before 47.48; 13.1 before 59.22; 13.1 FIPS and NDcPP before 37.241; 12.1 FIPS and NDcPP before 55.330 |
| CVE-2026-107406 | 9.5 | Oct 8 | Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Affected: before 14.1-73.46; before 13.1-64.29 |
| CVE-2026-19489 | 8.8 | Aug 19 | Vulnerability in NetScaler ADC and NetScaler Gateway Affected: 14.1 through 73.32; 13.1 through 63.21 |
| CVE-2025-8424 | 8.7 | Aug 26 | Improper access control on the NetScaler Management Interface Affected: 14.1 before 47.48; 13.1 before 59.22; 13.1 FIPS and NDcPP before 37.241; 12.1 FIPS and NDcPP before 55.330 |
| CVE-2024-8535 | 8.1 | Nov 12 | Authenticated user can access unintended user capabilities Affected: 14.1 before 29.72; 13.1 before 55.34; 13.1fips before 37.207; 12.1-fips before 55.321; 12.1-ndcpp before 55.321 |
| CVE-2024-8534 | 8.1 | Nov 12 | Memory safety vulnerability leading to memory corruption and Denial of Service Affected: 14.1 before 14.1-29.72 |
| CVE-2026-4368 | 7.7 | Mar 23 | Race Condition leading to User Session Mixup Affected: 14.1.66.54 |
| CVE-2026-13474 | 7.5 | Jun 30 | Denial of service via malformed HTTP/2 requests Affected: 14.1 before 72.61; 13.1 before 63.18 |
| CVE-2026-10817 | 7.5 | Jun 30 | Insufficient input validation leading to memory overread Affected: 14.1 before 72.61; 13.1 before 63.18 |
| CVE-2026-10816 | 7.5 | Jun 30 | Arbitrary File Read (Unauthenticated) Affected: 14.1 before 72.61; 13.1 before 63.18 |
| CVE-2026-8451 | 7.5 | Jun 30 | Insufficient input validation leading to memory overread Affected: 14.1 before 72.61; 13.1 before 63.18 |
| CVE-2025-12101 | 5.9 | Nov 11 | Cross-Site Scripting (XSS) Affected: 14.1 before 56.73; 13.1 before 60.32; 13.1-FIPS and NDcPP before 37.250; 12.1-FIPS and NDcPP before 55.333 |
Showing 20