Citrix Addresses High-Severity Flaw in NetScaler ADC and Gateway

Bishop Fox disclosed an unauthenticated out-of-bounds memory vulnerability in Citrix NetScaler ADC and Gateway (affecting version 13.1-50.23) that could allow remote attackers to read process memory and sometimes retrieve HTTP request bodies — potentially exposing credentials or cryptographic material; Citrix addressed the issue in 13.1-51.15 and did not assign a CVE, and no public exploitation has been reported.