N
Vendor security profile7 actively exploited CVEs
NetScaler
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs9
Critical5
CISA KEV7
Public exploit7
Patch rate%0
Avg. CVSS9.2
12-month vulnerability rate
0
0
0
0
0
0
0
1
0
2
2
2
CVE KEV
CVE severity distribution
9toplam CVE
Critical5 (56%)
High3 (33%)
Uncertain1 (11%)
Patch and exploitation view
%0
Verified patch
%78
CISA KEV
%78
Public exploit
0Patch available
0Partial
6Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
9.5
CVE-2026-107406
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
N
Patch status unknownEPSS %0
8.7
CVE-2026-88779 Actively exploited
Memory overflow vulnerability leading to Denial of Service
N
WorkaroundEPSS %1
8.8
CVE-2026-88778
TCP Initial Sequence Number (ISN) prediction
CN
Patch status unknownEPSS %0
8.8
CVE-2026-88777
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
CN
Patch status unknownEPSS %0
8.8
CVE-2026-88776
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
CN
Patch status unknownEPSS %0
8.8
CVE-2026-88775
Memory overflow vulnerability leading to unpredictable or erroneous behavior or Denial of Service
CN
Patch status unknownEPSS %0
9.3
CVE-2026-88773
HTTP Request Smuggling
CN
Patch status unknownEPSS %0
7.0
CVE-2026-88774
Feature policy bypass due to improper HTTP URL based expression usage
CN
Patch status unknownEPSS %0
9.5
CVE-2026-88772 Actively exploited
Memory overflow vulnerability leading to Remote Code Execution or Denial of Service
CN
WorkaroundEPSS %1
9.5
CVE-2026-88771 Actively exploited
A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands
CN
WorkaroundEPSS %1