Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Citrix NetScaler ADC/Gateway may crash from SMPP traffic

CVE-2026-107407 · published 2 days ago
Summary

The Citrix NetScaler ADC and Gateway devices can run out of memory when they handle SMPP (short message) traffic, which can cause the system to behave unpredictably or stop working. This could interrupt services that rely on the device. Update the device with the latest patches from Citrix or disable SMPP handling until the fix is applied.

What to do
  • Update citrix netscaler adc to version 14.1-73.57 or later.
  • Update citrix netscaler gateway to version 14.1-73.57 or later.
Affected software
VendorProductAffected versions
citrix netscaler adc < 14.1-73.57
citrix netscaler gateway < 14.1-73.57
Original advisory text
Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Timeline
Published13 Nov 2026
Updated14 Nov 2026
First seen13 Nov 2026
Sources
CVE-2026-107407 · NVD
CVE-2026-107407 · MITRE
Track software like this
Free during beta