NETSCALER ADC · CVE-2026-107411 · Infrastructure
FIX → 14.1-73.57 · 13.1-64.39 · 14.1-73.58 · 13.1-37.293 ✓ verified
Citrix bulletin CTX697305 lists CVE-2026-107411, a memory overflow in RTSP ALG that can cause unpredictable behavior or denial of service (CWE-119, CVSS v4.0 8.7, availability impact only, network, no auth). It applies only to NetScaler ADC configured with a Load Balancing virtual server of type RTSP, or with RTSP ALG enabled on an LSN group. The bulletin does not say it is exploited.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
NetScaler ADC appliances (self-managed) that run a Load Balancing virtual server of type RTSP, or RTSP ALG on an LSN group, on 14.1 before 14.1-73.57, 13.1 before 13.1-64.39, 14.1-FIPS before 14.1-73.58, or 13.1-FIPS/NDcPP before 13.1-37.293. Appliances without an RTSP vserver or LSN RTSP ALG meet no precondition in the bulletin.
Not affected if no-lsn-rtsp-alg, no-rtsp-vserver, rtsp-alg-disabled
Who cares citrix, dos, netscaler, self-hosted
show ns version and compare with the fixed builds. 2) Check the config for an LB vserver of type RTSP (e.g. and look for RTSP) or RTSP ALG enabled on an LSN group (e.g. )Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
show lb vservershow lsn groupUpgrade to 14.1-73.57 · 13.1-64.39 · 14.1-73.58 · 13.1-37.293
Upgrade to 14.1-73.57 or later, 13.1-64.39 or later 13.1, 14.1-FIPS 14.1-73.58 or later, or 13.1-FIPS/NDcPP 13.1-37.293 or later.