---
id: "CVE-2026-107415"
page: "https://infrastack.ai/live/CVE-2026-107415"
kind: "vulnerability"
aliases: ["CVE-2026-107415"]
title: "Citrix NetScaler ADC/Gateway: heap overflow in Email OTP authentication can cause denial of service"
severity: "critical"
cvss: 9.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "NetScaler ADC", "fixed": ["14.1-73.57", "13.1-64.39", "14.1-FIPS 14.1-73.58", "13.1-FIPS 13.1-37.293"], "affected": "unknown", "ecosystem": "vendor"}, {"name": "NetScaler Gateway", "fixed": ["14.1-73.57", "13.1-64.39"], "affected": "unknown", "ecosystem": "vendor"}]
ecosystems: []
tags: ["citrix-netscaler", "email-otp", "infrastructure", "netscaler-gateway", "self-hosted"]
not_affected_if: ["no-email-action"]
published_at: "2026-11-13T04:17:36+00:00"
first_seen_at: "2026-11-13T04:42:39+00:00"
updated_at: "2026-11-13T04:44:57+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-107415", "first_seen_at": "2026-11-13T04:42:39+00:00"}, {"source": "analyst", "url": "https://support.citrix.com/external/article/CTX697305", "first_seen_at": "2026-11-13T04:44:57+00:00", "cites": ["https://support.citrix.com/external/article/CTX697305"]}]
exploit_sources: []
---

# Citrix NetScaler ADC/Gateway: heap overflow in Email OTP authentication can cause denial of service

Link for people: https://infrastack.ai/live/CVE-2026-107415 (this .md is for agents)

Citrix bulletin CTX697305 describes a heap-based buffer overflow (CWE-122, CVSS v4 9.3, network, no auth or user interaction) in Email OTP authentication on NetScaler ADC and Gateway. It can lead to unpredictable or erroneous behavior or denial of service. Citrix does not say code execution is possible. Exposure needs an Email Action to be configured.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NetScaler ADC affected unknown fixed 14.1-73.57, 13.1-64.39, 14.1-FIPS 14.1-73.58, 13.1-FIPS 13.1-37.293
- vendor:NetScaler Gateway affected unknown fixed 14.1-73.57, 13.1-64.39

## How to check

Search the NetScaler running config (ns.conf) for entries matching: add authentication emailAction .* (Citrix's own check). If none, the precondition is not met. Then confirm the build is at or above the fixed build for your branch (show version).

## Fix

Upgrade to 14.1-73.57 or later, 13.1-64.39 or later (13.1), 14.1-FIPS 14.1-73.58 or later, or 13.1-FIPS/13.1-NDcPP 13.1-37.293 or later.

## Timeline

- 2026-11-13T04:42:39+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-107415
- 2026-11-13T04:44:57+00:00 analyst https://support.citrix.com/external/article/CTX697305 — Read Citrix bulletin CTX697305 (part of a 12+ CVE NetScaler bulletin, Nov 12 2026). Precondition, CWE-122, CVSS 9.3 and fixed builds confirmed; bulletin text I got did not list affected version ranges (page truncated), so no affected range. X/community not searched; no exploitation reported by sources.

## Documents

- [advisory] Citrix NetScaler ADC and Gateway Security Bulletin CTX697305 https://support.citrix.com/external/article/CTX697305

## From the sources

Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_