Sensitive Authentication Material Exposure in Citrix NetScaler ADC and Gateway
CVE-2026-111338

6.9MEDIUM

Key Information:

Vendor

Citrix
Status
Netscaler Adc
Netscaler Gateway
Vendor
CVE Published:
13 November 2026

What is CVE-2026-111338?

A vulnerability exists in Citrix NetScaler ADC and Citrix NetScaler Gateway where sensitive authentication credentials are inadvertently recorded in log files. This misconfiguration can potentially allow unauthorized access to sensitive data, impacting the overall security posture of the affected systems. Organizations using these Citrix products should take immediate action to review and secure their log management configurations to prevent potential data leaks.

Affected Version(s)

NetScaler ADC 0 < 14.1-73.57

NetScaler ADC 0 < 13.1-64.39

NetScaler ADC 0 < 14.1-73.58 FIPS

References

https://support.citrix.com/support-home/kbsearch/article?...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.