CVE-2026-107406
CVE-2026-107406: 1 tracked advisory record across NetScaler. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
NetScaler
1 advisory- Advisory severityCritical9.5
Critical [CVE-2026-107406] Protecting Customers: Immediate Guidance for CVE-2026-107406 in NetScaler ADC and NetScaler Gateway
protecting-customers-immediate-guidance-for-cve-2026-107406-in-netscaler-adc-andSource published
Today, Citrix published a critical security bulletin for NetScaler ADC and NetScaler Gateway regarding CVE-2026-107406. CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial of service under specific configuration conditions. The issue carries a CVSS v4.0 base score of 9.5 and is rated Critical. We strongly urge affected customers to review the advisory and upgrade impacted NetScaler instances to the recommended versions as soon as possible. As of the publication of the bulletin, Citrix is not aware of any unmitigated exploits of this vulnerability.
- Affected products in this advisory
- Gateway
- Source-reported affected versions
- NetScaler ADC and NetScaler Gateway before 14.1-73.37
- NetScaler ADC 14.1-FIPS before 14.1-73.37
- NetScaler ADC and NetScaler Gateway before 13.1-64.23
- Source-reported fixed versions
- 14.1-73.37
- 13.1-64.23
- Mitigation guidance
- Upgrade to a fixed build: 14.1-73.37, 13.1-64.23 or later for your release line.
Android app · Google Play
Monitor future NetScaler CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.