NETSCALER ADC · CVE-2026-107409 · Infrastructure
FIX → 14.1-73.57 · 13.1-64.39 +2 ✓ verified
Citrix bulletin CTX697305 lists a memory corruption (CWE-415 double free) in DNS-over-HTTPS handling that can cause unpredictable or erroneous behavior or denial of service. It applies only when NetScaler is configured with DNS Load Balancing over HTTPS. Citrix does not say code execution is possible, and lists no exploitation.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
NetScaler ADC and NetScaler Gateway appliances are affected, which are network devices that sit in front of company applications. The sources do not say whether the DoH feature must be enabled to be exposed, nor which firmware builds are vulnerable. Teams that do not run NetScaler products can skip it.
Not affected if doh-load-balancing-not-configured, managed-hosting, no-netscaler-deployment
Who cares dns-over-https, netscaler, netscaler-gateway, network-appliance, self-hosted
s precondition is configured with DNS Load Balancing over HTTPS'Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
Upgrade to 14.1-73.57 · 13.1-64.39 +2
Upgrade to NetScaler ADC/Gateway 14.1-73.57 or later, 13.1-64.39 or later 13.1, 14.1-FIPS 14.1-73.58 or later, or 13.1-FIPS/13.1-NDcPP 13.1-37.293 or later.