Is CVE-2026-10817 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-10817 being exploited in the wild.

How severe is CVE-2026-10817?

Informational severity, with a CVSS score of 6.9, published 30 June 2026.

Which products and versions are affected?

NetScaler ADC 14.1 before 72.61, 13.1 before 63.18, 14.1 FIPS before 72.61, 13.1 FIPS and NDcPP before 37.272; NetScaler Gateway 14.1 before 72.61, 13.1 before 63.18.

Is there a fix for CVE-2026-10817?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-10817 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-10817?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-10817: NetScaler ADC and Gateway memory overread in TCP TimeStamp handling

CVE-2026-10817 · Severity: info · CVSS 6.9 · Published 2026-06-30

NetScaler ADC and Gateway appliances are used to manage network traffic and provide secure remote access to corporate applications. A vulnerability has been identified where improper handling of network timing data could allow an attacker to read sensitive information from the device's memory. This could potentially lead to the exposure of internal system data, though it does not directly allow for system takeover or data modification.

Quick answers

Is CVE-2026-10817 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-10817 being exploited in the wild.
How severe is CVE-2026-10817?: Informational severity, with a CVSS score of 6.9, published 30 June 2026.
Which products and versions are affected?: NetScaler ADC 14.1 before 72.61, 13.1 before 63.18, 14.1 FIPS before 72.61, 13.1 FIPS and NDcPP before 37.272; NetScaler Gateway 14.1 before 72.61, 13.1 before 63.18.
Is there a fix for CVE-2026-10817?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-10817 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-10817?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An out-of-bounds read vulnerability (CWE-125) exists in NetScaler ADC and NetScaler Gateway. The issue is rooted in insufficient input validation of TCP packets when the TCP TimeStamp option is enabled within a TCP Profile associated with a virtual server (Load Balancing, Content Switching, or VPN) or a configured service. A remote, unauthenticated attacker can exploit this over the network to trigger a memory overread, potentially disclosing sensitive information from the system's memory. Patches have been released for affected versions 14.1 and 13.1, including FIPS-validated editions.

Affected products

NetScaler ADC 14.1 before 72.61, 13.1 before 63.18, 14.1 FIPS before 72.61, 13.1 FIPS and NDcPP before 37.272
NetScaler Gateway 14.1 before 72.61, 13.1 before 63.18

Timeline

2026-06-30: disclosed
2026-06-30: advisory

References

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.