NETSCALER ADC · CVE-2026-107415 · Infrastructure
FIX → 14.1-73.57 · 13.1-64.39 +2 ✓ verified
Citrix bulletin CTX697305 describes a heap-based buffer overflow (CWE-122, CVSS v4 9.3, network, no auth or user interaction) in Email OTP authentication on NetScaler ADC and Gateway. It can lead to unpredictable or erroneous behavior or denial of service. Citrix does not say code execution is possible. Exposure needs an Email Action to be configured.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Self-managed NetScaler ADC and NetScaler Gateway appliances with an Email Action configured (Email OTP in nFactor flows). Appliances without any 'add authentication emailAction' entry do not meet the precondition. Citrix-managed cloud instances are not addressed in the bulletin text I read.
Not affected if no-email-action
Who cares citrix-netscaler, email-otp, netscaler-gateway, self-hosted
Upgrade to 14.1-73.57 · 13.1-64.39 +2
Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
Upgrade to 14.1-73.57 or later, 13.1-64.39 or later (13.1), 14.1-FIPS 14.1-73.58 or later, or 13.1-FIPS/13.1-NDcPP 13.1-37.293 or later.