CVE-2026-4368 in NetScaler ADC

Sumário

de MITRE • 23/03/2026

Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsável: NetScaler
• Reservar: 18/03/2026
• Divulgação: 23/03/2026
• Moderação: aceite
• Entrada: VDB-352602
• CPE: pronto
• CWE: CWE-362 (confirmado)
• CVSS: 8.8 (VulDB)
• EPSS: 0.00015
• KEV: não
• Atividades: muito baixo
• Sector: Education, Insurance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-4368
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-4368
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-4368/