CVE 2026 8655

nvd.nist.gov • July 3, 2026

Multiple Memory overflow vulnerabilities in NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if NetScaler ADC is configured as an LB of type Oracle OR NetScaler ADC is configured as a DNS Proxy OR NetScaler ADC is configured as a DNS recursive resolver deployment

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Memory Overflow Vulnerabilities in NetScaler ADC and Gateway Two critical memory overflow vulnerabilities have been identified in NetScaler ADC and NetScaler Gateway, both published on July 2, 2026. CVE-2026-8655 affects configurations as an Oracle load balancer, DNS proxy, or DNS recursive resolver, leading to unpredictable behavior and potential Denial of Service (DoS). CVE-2026-8452 impacts configurations as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server, also resulting in similar issues. These vulnerabilities could allow attackers to exploit the affected systems, causing significant disruptions. Organizations using these configurations are urged to assess their systems for vulnerabilities and apply necessary mitigations. The current status is that both vulnerabilities are acknowledged, but no patches have been mentioned yet. 4 sources 65

Extracted Entities

CVE 2026 8655

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (2)

Platforms (2)