---
id: "CVE-2026-107412"
page: "https://infrastack.ai/live/CVE-2026-107412"
kind: "vulnerability"
aliases: ["CVE-2026-107412"]
title: "Citrix NetScaler Gateway and AAA servers: memory overflows reachable without login can crash the appliance"
severity: "critical"
cvss: 9.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "NetScaler ADC", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}, {"name": "NetScaler Gateway", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}]
ecosystems: []
tags: ["aaa", "citrix", "denial-of-service", "gateway", "infrastructure", "load-balancer", "netscaler", "pre-auth", "self-hosted"]
not_affected_if: ["no-gateway-or-aaa-vserver", "no-netscaler-deployed"]
published_at: "2026-11-13T03:17:28+00:00"
first_seen_at: "2026-11-13T03:42:55+00:00"
updated_at: "2026-11-13T03:44:55+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107412", "first_seen_at": "2026-11-13T03:42:55+00:00"}, {"source": "analyst", "url": "https://support.citrix.com/external/article/CTX697305", "first_seen_at": "2026-11-13T03:44:55+00:00", "cites": ["https://support.citrix.com/external/article/CTX697305", "https://cert.europa.eu/publications/security-advisories/2026-020/"]}]
exploit_sources: []
---

# Citrix NetScaler Gateway and AAA servers: memory overflows reachable without login can crash the appliance

Link for people: https://infrastack.ai/live/CVE-2026-107412 (this .md is for agents)

Citrix bulletin CTX697305 (12 Nov 2026) lists CVE-2026-107412 as multiple memory overflows (CWE-119) that can cause unpredictable behavior or denial of service. They apply when NetScaler is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA virtual server. The CVSS v4 vector is network, no privileges, no user interaction, with high impact ratings, but Citrix describes the effect only as erratic behavior or DoS and does not say code execution or data theft is possible. CERT-EU reports Citrix sees no exploitation and no public PoC is confirmed. Same bulletin fixes about 28 other NetScaler flaws.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NetScaler ADC affected < 14.1-73.57 fixed 14.1-73.57
- vendor:NetScaler Gateway affected < 14.1-73.57 fixed 14.1-73.57

## How to check

Check the NetScaler firmware version (System > System Information, or 'show version' on the CLI) against the fixed builds. Then check exposure: run 'show vpn vserver' and 'show authentication vserver' (or look for Gateway/AAA vservers in the config). If neither exists, this CVE's precondition is not met, though other CVEs in the same bulletin may still apply. Prioritize internet-facing Gateway and AAA appliances. Secure Private Access Hybrid deployments using NetScaler instances also need the upgrade (per CIRCL mirror of the bulletin).

## Fix

Upgrade to NetScaler ADC/Gateway 14.1-73.57 or later, 13.1-64.39 or later 13.1, ADC 14.1-FIPS 14.1-73.58 or later, or ADC 13.1-FIPS/13.1-NDcPP 13.1-37.293 or later.

## Timeline

- 2026-11-13T03:42:55+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107412
- 2026-11-13T03:44:55+00:00 analyst https://support.citrix.com/external/article/CTX697305 — Read Citrix CTX697305: precondition and fixed builds from vendor page; affected 'before' ranges (14.1<73.57, 13.1<64.39, FIPS<73.58, 13.1-FIPS/NDcPP<37.293) seen via CIRCL mirror only, so products not verified. Vendor page text was truncated before the how-to-check steps. No exploitation per CERT-EU. X not searched. Severity left critical (CVSS 9.5 vendor).

## Documents

- [advisory] Citrix NetScaler ADC and Gateway Security Bulletin (CTX697305) https://support.citrix.com/external/article/CTX697305
- [describes] CERT-EU 2026-020: Critical vulnerabilities in Citrix NetScaler https://cert.europa.eu/publications/security-advisories/2026-020/

## From the sources

Multiple Memory overflow vulnerabilities can lead to unpredictable or erroneous behavior and Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_