CVE-2026-86558.8High

CVE-2026-8655: Multiple Memory overflow vulnerabilities leading to unpredictable or erroneous behavior and Denial of Service

NetScaler · ADC

Vendor fix available · Affected: NetScaler ADC · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.6%probability of exploitation in the next 30 days

50th percentile

050100

Higher than 50% of scored CVEs

8.8HighCVSS 4.0

LowMediumHighCrit.

DescriptionNVD

Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Memory Buffer Bounds · Memory Corruption
Vendor: NetScaler
Published: June 2026
Band: Unlikely (under 1%), June 2026

Coverage1 article · 1 outlet

First in our coverage: SecurityWeek, 1 Jul.

1 Jul 11:51
Citrix fixes critical NetScaler flaws after HTTP/2 Bomb alert
SecurityWeek · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.