High8.7NetScaler (Citrix)
CVE-2026-107411: Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
This NetScaler advisory covers CVE-2026-107411 in Gateway.
- CVE-2026-107411
Key facts
- Vendor rating
- High, CVSS 8.7
- CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N· base score 8.7, scored by NetScalerAttack vector: network. Attack complexity: low. Attack requirements: none. Privileges required: none. User interaction: none. Confidentiality impact on the vulnerable system: none. Integrity impact on the vulnerable system: none. Availability impact on the vulnerable system: high. Confidentiality impact on subsequent systems: none. Integrity impact on subsequent systems: none. Availability impact on subsequent systems: none.- EPSS
- 0.25% chance of exploitation in the next 30 days (16th percentile). FIRST EPSS, .
- CISA KEV
- Not listed (catalogue checked )
- Affected
- ADC before 14.1-73.57; ADC before 13.1-64.39; ADC before 14.1-73.58 FIPS and 3 more below
- Fixed in
- 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS and 1 more below
- Source published
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
NetScaler (Citrix)NetScaler Gateway
Description
Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
Affected product named by the advisory: Gateway.
Text from the source record.
Affected versions
- ADC before 14.1-73.57
- ADC before 13.1-64.39
- ADC before 14.1-73.58 FIPS
- ADC before 13.1-37.293 FIPs and NDcPP
- Gateway before 14.1-73.57
- Gateway before 13.1-64.39
Official advisory · high-confidence parse· fetched ·verify at source
End-of-life dates for NetScaler Gateway
More NetScaler (Citrix) advisories
CVE-2026-107413Nov 13, 2026Memory overflow in SAML authenticationCVE-2026-107412Nov 13, 2026Multiple Memory overflowCVE-2026-107410Nov 13, 2026Memory overflow in NetScaler PushCVE-2026-107409Nov 13, 2026Memory corruption in DNS-over-HTTPS (DoH)CVE-2026-107408Nov 13, 2026Memory corruption in DNS / DNS-over-HTTPS (DoH)CVE-2026-107407Nov 13, 2026Memory overflow in SMPP traffic
NetScaler (Citrix) advisories, November 2026All NetScaler (Citrix) advisories
Get an email when NetScaler Gateway publishes the next one.
See NetScaler Gateway's last 90 days first. Live alerts for one product are free for life; every vendor is US$15 a month after a free month.