Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Citrix NetScaler ADC and Gateway may crash from memory overflow

CVE-2026-120868 · published 2 days ago
Summary

A coding mistake in the packet handling code of Citrix NetScaler ADC and NetScaler Gateway can cause memory to be overwritten. This may make the devices behave unpredictably, stop working, or become unavailable to users. Apply the latest software update from Citrix as soon as possible to fix the issue.

What to do
  • Update citrix netscaler adc to version 14.1-73.57 or later.
  • Update citrix netscaler gateway to version 14.1-73.57 or later.
Affected software
VendorProductAffected versions
citrix netscaler adc < 14.1-73.57
citrix netscaler gateway < 14.1-73.57
Original advisory text
Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
<1% chance of attack within 30 days
Timeline
Published12 Nov 2026
Updated14 Nov 2026
First seen13 Nov 2026
Sources
CVE-2026-120868 · NVD
CVE-2026-120868 · MITRE
Track software like this
Free during beta