Critical9.5NetScaler (Citrix)

CVE-2026-107412: Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

This NetScaler advisory covers CVE-2026-107412 in Gateway.

Key facts

Vendor rating: Critical, CVSS 9.5
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H · base score 9.5, scored by NetScalerAttack vector: network. Attack complexity: low. Attack requirements: present. Privileges required: none. User interaction: none. Confidentiality impact on the vulnerable system: high. Integrity impact on the vulnerable system: high. Availability impact on the vulnerable system: high. Confidentiality impact on subsequent systems: high. Integrity impact on subsequent systems: high. Availability impact on subsequent systems: high.
EPSS: 0.30% chance of exploitation in the next 30 days (23rd percentile). FIRST EPSS, Nov 13, 2026.
CISA KEV: Not listed (catalogue checked Nov 15, 2026)
Affected: ADC before 14.1-73.57; ADC before 13.1-64.39; ADC before 14.1-73.58 FIPS and 3 more below
Fixed in: 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS and 1 more below
Source published: Nov 13, 2026
Listed by VulniPulse: Nov 13, 2026

Compiled by VulniPulse from the linked sources. How records are collected and checked.

NetScaler (Citrix)NetScaler Gateway

Affected versions

Official advisory · high-confidence parse· fetched Nov 13, 2026·verify at source

See NetScaler Gateway's last 90 days first. Live alerts for one product are free for life; every vendor is US$15 a month after a free month.