---
id: "CVE-2026-107407"
page: "https://infrastack.ai/live/CVE-2026-107407"
kind: "vulnerability"
aliases: ["CVE-2026-107407"]
title: "NetScaler ADC: memory overflow in SMPP load-balancing traffic can crash the appliance"
severity: "critical"
cvss: 9.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "NetScaler ADC", "fixed": ["14.1-73.57", "13.1-64.39", "14.1-73.58 FIPS", "13.1-37.293"], "affected": "14.1 < 14.1-73.57; 13.1 < 13.1-64.39; 14.1-FIPS < 14.1-73.58; 13.1-FIPS/NDcPP < 13.1-37.293", "ecosystem": "vendor"}]
ecosystems: []
tags: ["infrastructure", "netscaler", "netscaler-adc", "netscaler-gateway", "self-hosted", "smpp"]
not_affected_if: ["managed-hosting", "no-smpp-vserver"]
published_at: "2026-11-13T02:18:49+00:00"
first_seen_at: "2026-11-13T02:41:35+00:00"
updated_at: "2026-11-13T02:45:17+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107407", "first_seen_at": "2026-11-13T02:41:35+00:00"}, {"source": "analyst", "url": "https://support.citrix.com/external/article/CTX697305", "first_seen_at": "2026-11-13T02:45:17+00:00", "cites": ["https://support.citrix.com/external/article/CTX697305"]}]
exploit_sources: []
---

# NetScaler ADC: memory overflow in SMPP load-balancing traffic can crash the appliance

Link for people: https://infrastack.ai/live/CVE-2026-107407 (this .md is for agents)

Memory overflow (CWE-119) in SMPP traffic handling in NetScaler ADC can cause unpredictable behavior or denial of service. Exploitable only when a Load Balancing or Content Switching virtual server of type SMPP is configured. CVSS v4 9.3, network, no auth. Vendor reports no exploitation.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NetScaler ADC affected 14.1 < 14.1-73.57; 13.1 < 13.1-64.39; 14.1-FIPS < 14.1-73.58; 13.1-FIPS/NDcPP < 13.1-37.293 fixed 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS, 13.1-37.293

## How to check

Search the NetScaler running config for lines matching 'add lb vserver .* SMPP' or 'add cs vserver .* SMPP'. No match means the precondition is not met.

## Fix

Upgrade to 14.1-73.57 or later (14.1), 13.1-64.39 or later (13.1), 14.1-73.58 FIPS or later (14.1-FIPS), 13.1-37.293 or later (13.1-FIPS and 13.1-NDcPP). The vendor bulletin lists no workaround.

## Timeline

- 2026-11-13T02:41:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107407
- 2026-11-13T02:45:17+00:00 analyst https://support.citrix.com/external/article/CTX697305 — Read Citrix bulletin CTX697305: SMPP overflow, needs LB/CS vserver of type SMPP; fixed 14.1-73.57, 13.1-64.39, FIPS builds; no workaround stated; no exploitation reported.

## Documents

- [advisory] Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin (CTX697305) https://support.citrix.com/external/article/CTX697305

## From the sources

Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_