A vulnerability classified as problematic has been found in Citrix NetScaler ADC and NetScaler Gateway. This affects an unknown part. The manipulation leads to memory leak. This vulnerability is traded as CVE-2026-13474. It is possible to initiate the attack remotely.
| Vendor | Product | Versions |
|---|---|---|
| citrix | netscaler_application_delivery_controller | 14.1, 13.1, 14.1 FIPS, 13.1 FIPS and NDcPP, 14.1, 13.1 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| citrix | netscaler | cert_advisory | 90% |
| citrix | netscaler_gateway | cve_cpe | 95% |
Updated description with details about a memory leak vulnerability, changed severity to HIGH, and noted that the vulnerability is actively exploited.
Initial creation
