{"cve":{"cve_id":"CVE-2026-8655","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00631,"epss_percentile":0.47434,"epss_as_of":"2026-08-28","description":"Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment","published_at":"2026-06-30T12:46:28.140000Z","last_modified_at":"2026-07-01T15:52:05.703000Z","cvss_v3_score":9.8,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_v3_severity":"CRITICAL","cvss_v4_score":8.8,"cvss_v4_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:L","cvss_v4_severity":"HIGH","ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":true,"ssvc_technical_impact":"partial","cwes":["CWE-119"],"nvd_references":["https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604"],"vuln_status":"Analyzed","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-30T13:46:12.619389Z","updated_at":"2026-07-02T07:33:52.206779Z"},"effective_severity":"HIGH","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"H","value_label":"High"},{"metric":"A","name":"Availability","value":"H","value_label":"High"}]},"cvss_v4_decoded":{"version":"4.0","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"AT","name":"Attack Requirements","value":"N","value_label":"None"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"VC","name":"Confidentiality (Vulnerable System)","value":"L","value_label":"Low"},{"metric":"VI","name":"Integrity (Vulnerable System)","value":"L","value_label":"Low"},{"metric":"VA","name":"Availability (Vulnerable System)","value":"H","value_label":"High"},{"metric":"SC","name":"Confidentiality (Subsequent System)","value":"N","value_label":"None"},{"metric":"SI","name":"Integrity (Subsequent System)","value":"N","value_label":"None"},{"metric":"SA","name":"Availability (Subsequent System)","value":"L","value_label":"Low"}]},"affected":[{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":"14.1-66.68","version_start_inclusive":true,"version_end":"14.1-66.68","version_end_inclusive":true,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:14.1-66.68:*:*:*:fips:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":null,"version_start_inclusive":null,"version_end":"13.1-37.272","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:fips:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":null,"version_start_inclusive":null,"version_end":"13.1-37.272","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:ndcpp:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-application-delivery-controller","product_name":"netscaler_application_delivery_controller","version_start":"13.1","version_start_inclusive":true,"version_end":"13.1-63.18","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_application_delivery_controller:*:*:*:*:-:*:*:*"},{"vendor_slug":"citrix","vendor_name":"Citrix","product_slug":"netscaler-gateway","product_name":"NetScaler Gateway","version_start":"13.1","version_start_inclusive":true,"version_end":"13.1-63.18","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:citrix:netscaler_gateway:*:*:*:*:*:*:*:*"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"14.1","version_start_inclusive":true,"version_end":"72.61","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:14.1:72.61"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"13.1","version_start_inclusive":true,"version_end":"63.18","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:13.1:63.18"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"14.1 FIPS","version_start_inclusive":true,"version_end":"72.61","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:14.1 FIPS:72.61"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"adc","product_name":"ADC","version_start":"13.1 FIPS and NDcPP","version_start_inclusive":true,"version_end":"37.272","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:adc:13.1 FIPS and NDcPP:37.272"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"gateway","product_name":"Gateway","version_start":"13.1","version_start_inclusive":true,"version_end":"63.18","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:gateway:13.1:63.18"},{"vendor_slug":"netscaler","vendor_name":"NetScaler","product_slug":"gateway","product_name":"Gateway","version_start":"14.1","version_start_inclusive":true,"version_end":"72.61","version_end_inclusive":false,"cpe23_uri":"cve5:netscaler:gateway:14.1:72.61"}],"exploit_refs":[],"news":[],"references":[{"url":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2026-06-30T12:46:28.140000Z","label":"CVE published","source":null},{"type":"ssvc_changed","at":"2026-06-30T14:46:12.619459Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-30T14:46:12.619459Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-30T14:46:12.619459Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"cvss_changed","at":"2026-07-02T07:33:52.206779Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-07-02T07:33:52.206779Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-07-02T07:33:52.206779Z","label":"CVSS score revised","source":"nvd"}]}