Paper/Archive/CVE-2026-120868

CVE-2026-120868

Citrix NetScaler ADC — Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway

CVSS 9.3

critical.is priorityof 100

CVSS 9.3 (CNA)9.3 / 10 × 3027.9 Not in CISA KEV+300.0 No EPSS score.000 × 200.0 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

Affected

ProductAffectedFixed inSource

ADC< 14.1-73.5714.1-73.57CNA

ADC< 13.1-64.3913.1-64.39CNA

ADC< 14.1-73.58 FIPS14.1-73.58 FIPSCNA

ADC< 13.1-37.293 FIPs and NDcPP13.1-37.293 FIPs and NDcPPCNA

Gateway< 14.1-73.5714.1-73.57CNA

Gateway< 13.1-64.3913.1-64.39CNA

Scores by source

NetScaler (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

References

refsupport.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305