Paper/Archive/CVE-2026-107412

CVE-2026-107412

Citrix NetScaler ADC — Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

CVSS 9.5

critical.is priorityof 100

CVSS 9.5 (CNA)9.5 / 10 × 3028.5 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Affected

ProductAffectedFixed inSource

ADC< 14.1-73.5714.1-73.57CNA

ADC< 13.1-64.3913.1-64.39CNA

ADC< 14.1-73.58 FIPS14.1-73.58 FIPSCNA

ADC< 13.1-37.293 FIPs and NDcPP13.1-37.293 FIPs and NDcPPCNA

Gateway< 14.1-73.5714.1-73.57CNA

Gateway< 13.1-64.3913.1-64.39CNA

Scores by source

NetScaler (CNA)9.5CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

refsupport.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305