CRITICALCVSS v4 9.3Vulnerability

CVE-2026-120864

Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Properties

Severity
CRITICAL
Nvd fetched at
2026-11-14T00:40:25.638091+00:00
Epss score
0.0031
Cvss score
9.3
Cvss severity
CRITICAL
Retrieved at
2026-11-14T00:51:03+00:00
Score
9.3
Last source
FIRST EPSS
Cvss version
4.0
Cve id
CVE-2026-120864
Cvss vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
First seen by Signal
2026-11-13T17:31:47+00:00
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published at
2026-11-13T09:17:34.057
Last modified
2026-11-13T09:17:34.057
Epss percentile
0.24135

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-120864 (CVSS v4 9.3) — Ninja Signal Threat Intelligence | Ninja Signal