Memory Overflow Vulnerability in Citrix NetScaler ADC and Gateway
CVE-2026-111336

8.3HIGH

Key Information:

Vendor

Citrix
Status
Netscaler Adc
Netscaler Gateway
Vendor
CVE Published:
13 November 2026

What is CVE-2026-111336?

A memory overflow vulnerability in the HTTP/2 handling process of Citrix NetScaler ADC and Citrix NetScaler Gateway can cause unpredictable behavior or lead to a Denial of Service. This flaw may allow attackers to manipulate memory allocation, potentially disrupting services and affecting system stability. It is essential for organizations using these products to implement the latest security patches and remediation measures to protect against potential exploitation.

Affected Version(s)

NetScaler ADC 0 < 14.1-73.57

NetScaler ADC 0 < 13.1-64.39

NetScaler ADC 0 < 14.1-73.58 FIPS

References

https://support.citrix.com/support-home/kbsearch/article?...

CVSS V4

Score:
8.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.