CVE-2026-4368

Race Condition leading to User Session Mixup

High · published March 23, 2026

CVSS v4.0
7.7
EPSS
0%
Percentile
22.3
In the wild
Unconfirmed
What it is

Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00307 · 22.3th percentile
Published
2026-03-23T20:09Z
EPSS history
Timeline
  • 23 MAR 20:09Z
    Race Condition leading to User Session Mixup
    cvelistv5