CVE-2026-4368: NetScaler ADC

High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days.

Race Condition in NetScaler ADC and NetScaler Gateway when appliance is configured as Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server leading to User Session Mixup

Affected products

• NetScaler ADC: version 14.1.66.54 only
• NetScaler Gateway: version 14.1.66.54 only

Published 2026-03-23. Last modified 2026-06-17.