CVE-2026-10817CWE-125

Insufficient input validation leading to memory overread

Medium · published June 30, 2026

CVSS v4.0
6.9
EPSS
1%
Percentile
45.9
In the wild
Unconfirmed
What it is

Insufficient input validation leading to memory overread in NetScaler ADC and NetScaler Gateway if the TCP TimeStamp is enabled in TCP Profile and is associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00560 · 45.9th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2026-06-30T12:58Z
EPSS history
Timeline
  • 30 JUN 12:58Z
    Insufficient input validation leading to memory overread
    cvelistv5