Paper/Archive/CVE-2026-111334

CVE-2026-111334

Citrix NetScaler ADC — Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Affected

ProductAffectedFixed inSource

NetScaler ADC< 14.1-73.5714.1-73.57CNA

NetScaler ADC< 13.1-64.3913.1-64.39CNA

NetScaler ADC< 14.1-73.58 FIPS14.1-73.58 FIPSCNA

NetScaler ADC< 13.1-37.293 FIPs and NDcPP13.1-37.293 FIPs and NDcPPCNA

NetScaler Gateway< 14.1-73.5714.1-73.57CNA

NetScaler Gateway< 13.1-64.3913.1-64.39CNA

Scores by source

NetScaler (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

References

refsupport.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305