Vulnerability intelligence
CVE-2026-8655
NetScaler ADC
Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment
CVSS Score
8.8
High
EPSS — Exploit Probability
0.6%
Riskier than 48% of all CVEs · checked 2026-09-29
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered Jul 1, 2026 · latest Jul 1, 2026
Coverage timeline
-
Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alertwww.securityweek.com · Jul 1, 2026