NetScaler security advisories, November 2026

Every NetScaler (Citrix) security advisory published in November 2026, from NetScaler / Cloud Software Group Security Bulletins, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 29
Critical: 10
High: 15
In CISA KEV: 0
CVEs: 29

NetScaler advisories published in November 2026

Nov 13, 2026
Critical [CVE-2026-120864] Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Critical9.3
Nov 13, 2026
Critical [CVE-2026-111334] Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Critical9.3
Nov 13, 2026
Critical [CVE-2026-107415] Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Critical9.3
Nov 13, 2026
Critical [CVE-2026-107412] Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Critical9.5
Nov 13, 2026
Critical [CVE-2026-107410] Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Critical9.3
Nov 13, 2026
Critical [CVE-2026-107409] Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway
Critical9.3
Nov 13, 2026
Critical [CVE-2026-107408] Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Critical9.3
Nov 13, 2026
Critical [CVE-2026-107407] Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Critical9.3
Nov 13, 2026
High [CVE-2026-120867] Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-120866] Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High7.7
Nov 13, 2026
High [CVE-2026-120865] Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-120863] Memory overflow in the management plane can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-120862] Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
High8.7
Nov 13, 2026
High [CVE-2026-120861] Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
High8.7
Nov 13, 2026
High [CVE-2026-120860] Memory overflow in protocol load-balancing traffic handling (Diameter, SIP-over-TCP, MQTT, RADIUS) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-111337] Memory overflow in Base64 decoding in advanced policy expressions leading to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-111336] Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.3
Nov 13, 2026
High [CVE-2026-111342] Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-111341] Memory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-111340] Memory overflow in KBA (knowledge-based authentication) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-107414] Memory overflow in WebAuth authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-107413] Memory overflow in SAML authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
High8.7
Nov 13, 2026
High [CVE-2026-107411] Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
High8.7
Nov 13, 2026
Medium [CVE-2026-111339] Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Medium6.9
Nov 13, 2026
Medium [CVE-2026-111338] Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway
Medium6.9
Nov 13, 2026
Medium [CVE-2026-111335] Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway
Medium6.9
Nov 13, 2026
Medium [CVE-2026-111333] Memory overflow in an authentication request can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Medium6.9
Nov 12, 2026
Critical [CVE-2026-120868] Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
Critical9.3
Nov 12, 2026
Critical [CVE-2026-120869] unauthenticated attacker can bypass authentication controls to access restricted resources on the Citrix NetScaler Console appliance
Critical9.3

Get an email when NetScaler publishes the next one.

See NetScaler's last 90 days first. Live alerts for one product are free for life; every vendor is US$15 a month after a free month.

Alert me about NetScaler

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.