---
id: "CVE-2026-107411"
page: "https://infrastack.ai/live/CVE-2026-107411"
kind: "vulnerability"
aliases: ["CVE-2026-107411"]
title: "Citrix NetScaler ADC: memory overflow in RTSP ALG can cause denial of service (RTSP LB vserver or LSN RTSP ALG)"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "NetScaler ADC", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}, {"name": "NetScaler ADC 13.1", "fixed": ["13.1-64.39"], "affected": "< 13.1-64.39", "ecosystem": "vendor"}, {"name": "NetScaler ADC 14.1-FIPS", "fixed": ["14.1-73.58"], "affected": "< 14.1-73.58", "ecosystem": "vendor"}, {"name": "NetScaler ADC 13.1-FIPS and NDcPP", "fixed": ["13.1-37.293"], "affected": "< 13.1-37.293", "ecosystem": "vendor"}]
ecosystems: []
tags: ["citrix", "dos", "infrastructure", "netscaler", "self-hosted"]
not_affected_if: ["no-lsn-rtsp-alg", "no-rtsp-vserver", "rtsp-alg-disabled"]
published_at: "2026-11-13T03:17:28+00:00"
first_seen_at: "2026-11-13T03:42:55+00:00"
updated_at: "2026-11-13T03:44:59+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107411", "first_seen_at": "2026-11-13T03:42:55+00:00"}, {"source": "analyst", "url": "https://support.citrix.com/external/article/CTX697305/citrix-netscaler-adc-and-citrix-netscale.html", "first_seen_at": "2026-11-13T03:44:59+00:00", "cites": ["https://support.citrix.com/external/article/CTX697305/citrix-netscaler-adc-and-citrix-netscale.html"]}]
exploit_sources: []
---

# Citrix NetScaler ADC: memory overflow in RTSP ALG can cause denial of service (RTSP LB vserver or LSN RTSP ALG)

Link for people: https://infrastack.ai/live/CVE-2026-107411 (this .md is for agents)

Citrix bulletin CTX697305 lists CVE-2026-107411, a memory overflow in RTSP ALG that can cause unpredictable behavior or denial of service (CWE-119, CVSS v4.0 8.7, availability impact only, network, no auth). It applies only to NetScaler ADC configured with a Load Balancing virtual server of type RTSP, or with RTSP ALG enabled on an LSN group. The bulletin does not say it is exploited.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NetScaler ADC affected < 14.1-73.57 fixed 14.1-73.57
- vendor:NetScaler ADC 13.1 affected < 13.1-64.39 fixed 13.1-64.39
- vendor:NetScaler ADC 14.1-FIPS affected < 14.1-73.58 fixed 14.1-73.58
- vendor:NetScaler ADC 13.1-FIPS and NDcPP affected < 13.1-37.293 fixed 13.1-37.293

## How to check

1) Run 'show ns version' and compare with the fixed builds. 2) Check the config for an LB vserver of type RTSP (e.g. 'show lb vserver' and look for RTSP) or RTSP ALG enabled on an LSN group (e.g. 'show lsn group'). Neither is exposed if both are absent. The vendor's own check instructions were not read.

## Fix

Upgrade to 14.1-73.57 or later, 13.1-64.39 or later 13.1, 14.1-FIPS 14.1-73.58 or later, or 13.1-FIPS/NDcPP 13.1-37.293 or later.

## Timeline

- 2026-11-13T03:42:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107411
- 2026-11-13T03:44:59+00:00 analyst https://support.citrix.com/external/article/CTX697305/citrix-netscaler-adc-and-citrix-netscale.html — Read Citrix bulletin CTX697305: precondition, affected/fixed versions confirmed. Bulletin text I got was truncated, so the vendor's own how-to-check command is not read; no exploitation or PoC stated. X and posts not searched.

## Documents

- [advisory] Citrix NetScaler ADC and Gateway Security Bulletin (CTX697305) https://support.citrix.com/external/article/CTX697305/citrix-netscaler-adc-and-citrix-netscale.html

## From the sources

Memory overflow in RTSP ALG can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_