high7.5
CVE-2026-13474
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual ser…
Impact
Denial of service via malformed HTTP/2 requests in NetScaler ADC and NetScaler Gateway if HTTP/2 is enabled in HTTP Profile and associated with the virtual server (of type LB, CS, VPN) or the service configured on NetScaler
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Netscaler Application Delivery Controller | before 13.1-37.272 from 13.1 before 13.1-63.18 from 14.1 before 14.1-72.61 Version 14.1-66.68 |
| Citrix | Netscaler Gateway | from 13.1 before 13.1-63.18 from 14.1 before 14.1-72.61 |