Paper/Archive/CVE-2026-107415

CVE-2026-107415

Citrix NetScaler ADC — Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Affected

ProductAffectedFixed inSource

NetScaler ADC< 14.1-73.5714.1-73.57CNA

NetScaler ADC< 13.1-64.3913.1-64.39CNA

NetScaler ADC< 14.1-73.58 FIPS14.1-73.58 FIPSCNA

NetScaler ADC< 13.1-37.293 FIPs and NDcPP13.1-37.293 FIPs and NDcPPCNA

NetScaler Gateway< 14.1-73.5714.1-73.57CNA

NetScaler Gateway< 13.1-64.3913.1-64.39CNA

Scores by source

NetScaler (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

References

refsupport.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305