by Kastro
Paper/Archive/CVE-2026-107406

CVE-2026-107406

NetScaler ADC — Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

EPSS 2%CVSS 9.5
critical.is priorityof 100
44
CVSS 9.5 (CNA)9.5 / 10 × 3028.5Not in CISA KEV+300.0EPSS percentile 79.3.793 × 2015.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:   * For the following versions: Applicable only when configured as a SAML IdP: * NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive * NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive * NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive * NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive   For the following versions: Applicable only when configured as a SAML SP or SAML IdP: * NetScaler ADC and NetScaler Gateway before 14.1-73.37  * NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS  * NetScaler ADC and NetScaler Gateway before 13.1-64.23 * NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279

Affected

ProductAffectedFixed inSource
ADC< 14.1-73.4614.1-73.46CNA
ADC< 13.1-64.2913.1-64.29CNA
ADC< 14.1-73.46 FIPS14.1-73.46 FIPSCNA
ADC< 13.1.37.283 FIPS13.1.37.283 FIPSCNA
Gateway< 14.1-73.4614.1-73.46CNA
Gateway< 13.1-64.2913.1-64.29CNA

Scores by source

NetScaler (CNA)9.5CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsupport.citrix.com/support-home/kbsearch/article?articleNumber=CTX697191advisorycommunity.citrix.com/techzone-blogs/110_security-updates/protecting-customers-immediate-guidance-for-cve-2026-107406-in-netscaler-adc-and-netscaler-gateway-r1631