Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Citrix NetScaler ADC/Gateway DoH crash can cause service outage

CVE-2026-107409 · published 2 days ago
Summary

A flaw in the DNS-over-HTTPS handling of Citrix NetScaler ADC and Gateway can corrupt memory, leading to unpredictable behavior or a complete stop of service. This may affect users trying to access applications through the appliance. Install the latest security update from Citrix as soon as possible to fix the issue.

What to do
  • Update citrix netscaler adc to version 14.1-73.57 or later.
  • Update citrix netscaler gateway to version 14.1-73.57 or later.
Affected software
VendorProductAffected versions
citrix netscaler adc < 14.1-73.57
citrix netscaler gateway < 14.1-73.57
Original advisory text
Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler
Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Timeline
Published13 Nov 2026
Updated14 Nov 2026
First seen13 Nov 2026
Sources
CVE-2026-107409 · NVD
CVE-2026-107409 · MITRE
Track software like this
Free during beta