CVE-2026-10816

HIGH

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

CVSS v3.1 Score

7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE
Published: 6/30/2026Modified: 7/2/2026

Related Intelligence (2)

CRITICALVulnerability

New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild

Citrix NetScaler appliances have been a constant target for attackers in recent years, most recently through an information leak vulnerability dubbed CitrixBleed 3, the latest in a series of NetScaler memory overreads going back to 2023. This week, Citrix patched yet another CitrixBleed-like vulnerability and there are signs of in-the-wild exploitation already. The new memory overread vulnerabilit

CVE-2026-8451CVE-2023-4966
CSO Online
HIGHVulnerability

NVD HIGH: CVE-2026-10816 — Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if ...

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

CVE-2026-10816
NIST NVD

References (1)

https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604Vendor Advisory