Memory Overflow Issue in Citrix NetScaler SIP ALG and DNS Logging
CVE-2026-120862

8.7HIGH

Key Information:

Vendor

Citrix
Status
Netscaler Adc
Netscaler Gateway
Vendor
CVE Published:
13 November 2026

What is CVE-2026-120862?

A memory overflow vulnerability exists in the SIP ALG and DNS answer-section logging functionalities within Citrix NetScaler. This issue can result in unpredictable behavior or erroneous system performance, potentially leading to denial of service conditions. Organizations using affected versions should evaluate their configurations and apply mitigation measures as suggested by Citrix to enhance security.

Affected Version(s)

NetScaler ADC 0 < 14.1-73.57

NetScaler ADC 0 < 13.1-64.39

NetScaler ADC 0 < 14.1-73.58 FIPS

References

https://support.citrix.com/support-home/kbsearch/article?...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.