Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Citrix NetScaler may crash or stop handling DNS requests

CVE-2026-107408 · published 2 days ago
Summary

A coding mistake in Citrix NetScaler's DNS and DNS‑over‑HTTPS handling can cause the device to behave unpredictably or become unavailable. This could interrupt users' ability to reach websites or internal services. Apply the latest software update from Citrix or follow their guidance to fix the issue.

What to do
  • Update citrix netscaler adc to version 14.1-73.57 or later.
  • Update citrix netscaler gateway to version 14.1-73.57 or later.
Affected software
VendorProductAffected versions
citrix netscaler adc < 14.1-73.57
citrix netscaler gateway < 14.1-73.57
Original advisory text
Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Timeline
Published13 Nov 2026
Updated14 Nov 2026
First seen13 Nov 2026
Sources
CVE-2026-107408 · NVD
CVE-2026-107408 · MITRE
Track software like this
Free during beta