CVE-2026-10816
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
An unauthenticated attacker can read arbitrary files on NetScaler ADC and NetScaler Gateway if access to NSIP, Cluster Management IP, or SNIP with management access is enabled.
Risk Assessment
The attacker can access sensitive configuration files, passwords, or keys, leading to full device and network compromise.
Recommendation
Immediately disable management access to NSIP, Cluster Management IP, and SNIP unless absolutely required, and apply the vendor patch.
Other vulnerabilities in NetScaler ADC and NetScaler Gateway
See all- CVE-2026-19490Critical
Vulnerability in NetScaler ADC and NetScaler Gateway products. Affects ADC versions from 14.1 through 73.32 and from 13.1 through 63.21; Gateway versions from 14.1 through 73.32 and from 13.1 through 63.21.
- CVE-2026-8452CriticalActively exploited
A memory overflow vulnerability in NetScaler ADC and NetScaler Gateway can lead to unpredictable or erroneous behavior and Denial of Service (DoS) if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
- CVE-2026-19489High
Vulnerability in NetScaler ADC and NetScaler Gateway. Affects ADC versions from 14.1 through 73.32 and from 13.1 through 63.21; Gateway from 14.1 through 73.32 and from 13.1 through 63.21.
- CVE-2026-10817High
Insufficient input validation in NetScaler ADC and NetScaler Gateway leads to memory overread if the TCP Timestamp is enabled in the TCP Profile and associated with a virtual server (type LB, CS, VPN) or a configured service.
Original NVD description (English source)
Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled