Live › vulnerability › CVE-2023-4966
Go to dashboardCitrix NetScaler ADC and NetScaler Gateway contain a buffer overflow when configured as a Gateway or AAA virtual server, leaking sensitive information from memory. Attackers can steal session tokens and bypass authentication, and the flaw is actively exploited in the wild per CISA KEV.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Citrix NetScaler ADC and NetScaler Gateway | vendor | – | – |
| citrix netscaler application delivery controller | vendor | >= 12.1, < 12.1-55.300 | 12.1-55.300 |
| citrix netscaler application delivery controller | vendor | >= 13.0, < 13.0-92.19 | 13.0-92.19 |
| citrix netscaler application delivery controller | vendor | >= 13.1, < 13.1-37.164 | 13.1-37.164 |
| citrix netscaler application delivery controller | vendor | >= 13.1, < 13.1-49.15 | 13.1-49.15 |
| citrix netscaler application delivery controller | vendor | >= 14.1, < 14.1-8.50 | 14.1-8.50 |
| citrix netscaler gateway | vendor | >= 13.0, < 13.0-92.19 | 13.0-92.19 |
| citrix netscaler gateway | vendor | >= 13.1, < 13.1-49.15 | 13.1-49.15 |
| citrix netscaler gateway | vendor | >= 14.1, < 14.1-8.50 | 14.1-8.50 |
Check whether the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server; sources do not give a specific command.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Citrix NetScaler ADC and NetScaler Gateway contain a buffer overflow vulnerability that allows for sensitive information disclosure when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
CISA required action: Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2023-4966")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.