Paper/Archive/CVE-2026-107409

CVE-2026-107409

Citrix NetScaler ADC — Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler

CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler

Affected

ProductAffectedFixed inSource

ADC< 14.1-73.5714.1-73.57CNA

ADC< 13.1-64.3913.1-64.39CNA

ADC< 14.1-73.58 FIPS14.1-73.58 FIPSCNA

ADC< 13.1-37.293 FIPs and NDcPP13.1-37.293 FIPs and NDcPPCNA

Gateway< 14.1-73.5714.1-73.57CNA

Gateway< 13.1-64.3913.1-64.39CNA

Scores by source

NetScaler (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

refsupport.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305