Memory Overflow in Citrix NetScaler ADC and Gateway
CVE-2026-111339

6.9MEDIUM

Key Information:

Vendor

Citrix
Status
Netscaler Adc
Netscaler Gateway
Vendor
CVE Published:
13 November 2026

What is CVE-2026-111339?

A memory overflow issue has been identified in the data decompression and inspection functionalities of Citrix NetScaler ADC and Citrix NetScaler Gateway. This vulnerability can potentially lead to unpredictable or erroneous system behavior, including Denial of Service scenarios. Organizations using these products are encouraged to review their configurations and apply necessary updates to mitigate potential risks associated with this flaw.

Affected Version(s)

NetScaler ADC 0 < 14.1-73.57

NetScaler ADC 0 < 13.1-64.39

NetScaler ADC 0 < 14.1-73.58 FIPS

References

https://support.citrix.com/support-home/kbsearch/article?...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.