CVE-2026-10816

Published: Jun 30, 2026Modified: Jul 2, 2026

7.1

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5 (Secondary)

Description

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

Affected (7)

Products: Citrix: Netscaler Application Delivery Controller, Netscaler Gateway

Citrix

2 products

Netscaler Application Delivery Controller

Netscaler Gateway

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Citrix Netscaler Application Delivery Controller	From 13.1 to 13.1-63.18
Citrix Netscaler Application Delivery Controller	From 14.1 to 14.1-72.61
Citrix Netscaler Application Delivery Controller	Before 13.1-37.272
Citrix Netscaler Application Delivery Controller	Before 13.1-37.272
Citrix Netscaler Application Delivery Controller	Version 14.1-66.68
Citrix Netscaler Gateway	From 13.1 to 13.1-63.18
Citrix Netscaler Gateway	From 14.1 to 14.1-72.61

Related CWEs

CWE-610

Externally Controlled Reference to a Resource in Another Sphere

The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.

CWE-73

External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

References (1)

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

Source: 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5

Vendor Advisory

Timeline

No history available yet.