CVE-2025-8424
Improper access control on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway when an attacker can get access to the appliance NSIP, Cluster Management IP or local GSLB Site IP or SNIP with Management Access
Scoring
- Severity
- HIGH
- CVSS base score
- 8.7
- CVSS vector
- CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
- EPSS probability
- 2.82%
- CWE
- CWE-1284
- Published
- 2025-08-26
- Last modified
- 2026-03-12
Affected products
- NetScaler ADC
- NetScaler ADC
- NetScaler ADC
- NetScaler ADC
- NetScaler Gateway
- NetScaler Gateway
- NetScaler Gateway
- NetScaler Gateway
Weakness type
Related vulnerabilities
- CVE-2026-87735 — An issue was discovered in the mirage-crypto-pk package before 2.3.0 for OCaml. There is an...
- CVE-2026-87470 — Improper quantity validation in Tint in Google Chrome on on Mac prior to 153.0.8010.36 allowed a...
- CVE-2026-16025 — Improper Payment Validation in PayTR's PayTR Virtual Pos iFrame API (v9x) WHMCS Module
- CVE-2026-85201 — In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a...
- CVE-2026-82750 — Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation
- CVE-2026-82751 — Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning
- CVE-2026-82752 — Ash string length constraints count graphemes, so a combining-mark string of any size passes max_length
- CVE-2026-53720 — pymonocypher: Potential heap buffer overflow on nb_blocks in argon2i_32 when provided buffer is too small