Memory Overflow Vulnerability in Citrix NetScaler ADC and Gateway
CVE-2026-120866

7.7HIGH

Key Information:

Vendor

Citrix
Status
Netscaler Adc
Netscaler Gateway
Vendor
CVE Published:
13 November 2026

What is CVE-2026-120866?

This vulnerability involves a memory overflow issue stemming from the improper handling of the BGP dynamic routing protocol within Citrix NetScaler ADC and Citrix NetScaler Gateway. It can potentially lead to unpredictable behavior or result in a Denial of Service attack, affecting the availability of these critical services and presenting a security risk for users and organizations relying on this infrastructure. Timely patching and mitigation strategies are essential to safeguard against potential exploits.

Affected Version(s)

NetScaler ADC 0 < 14.1-73.57

NetScaler ADC 0 < 13.1-64.39

NetScaler ADC 0 < 14.1-73.58 FIPS

References

https://support.citrix.com/support-home/kbsearch/article?...

CVSS V4

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.