CVE-2026-10816

published 2026-06-30

CVE-2026-10816: Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is…

Priority P4 32 high 7.1 CVSS 4.0

AV A AC L AT N PR N UI N VC H VI L VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

Affected

6 ranges

Vendor	Product	Version range	Fixed in
netscaler	adc	>= 13.1 < 63.18	63.18
netscaler	adc	>= 13.1 FIPS and NDcPP < 37.272	37.272
netscaler	adc	>= 14.1 < 72.61	72.61
netscaler	adc	>= 14.1 FIPS < 72.61	72.61
netscaler	gateway	>= 13.1 < 63.18	63.18
netscaler	gateway	>= 14.1 < 72.61	72.61

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-73