What is the fix for CVE-2026-111334?

Upgrade to 14.1-73.57 or later (14.1); 13.1-64.39 or later (13.1); 14.1-73.58 FIPS or later (14.1-FIPS); 13.1-37.293 or later (13.1-FIPS and 13.1-NDcPP). Citrix lists no workaround.

Post Share

CRITICAL9.3CVSS · 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5

NO KNOWN
EXPLOIT

NETSCALER ADC · CVE-2026-111334 · Infrastructure

Citrix NetScaler ADC and Gateway: memory overflow in Endpoint Analysis (EPA/EPAS) can cause erroneous behavior or denial of service

Q: Who is not affected by CVE-2026-111334?

Not affected if: citrix-managed-cloud, no-epa-configured.

FIX → 14.1-73.57 ✓ verified

A memory overflow in Endpoint Analysis (EPA/EPAS) in Citrix NetScaler ADC and NetScaler Gateway can cause unpredictable or erroneous behavior, or a denial of service. The sources do not state that an attacker can run code or read data from this flaw.

first public Nov 13, 2026 · 2 sources

Check it with your coding agent

It reads this page and tells you if your code or app is affected.

Claude CodeCodexCursorAdd to your agent

01 · Who is affected

Customer-managed NetScaler ADC and NetScaler Gateway appliances in the affected builds that run as a VPN or AAA virtual server with Endpoint Analysis (EPA) enabled. Citrix-managed cloud services and Adaptive Authentication are upgraded by Cloud Software Group. Appliances without EPA configured do not meet Citrix's stated precondition.

NetScaler ADC< 14.1-73.57fixed in 14.1-73.57
NetScaler Gateway< 14.1-73.57fixed in 14.1-73.57

Not affected if citrix-managed-cloud, no-epa-configured

Who cares citrix, endpoint-analysis, netscaler, netscaler-gateway, self-hosted, vpn

02 · How to check

Run show ns version; you are in range if it is below 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS or 13.1-37.293 (FIPS/NDcPP).
Citrix's precondition: the appliance is a VPN virtual server or an authentication (AAA) virtual server with Endpoint Analysis. Look in ns.conf for 'add authentication epaAction', 'add aaa preauthenticationpolicy', or clientSecurity in the VPN parameter or session action (check commands per fetched bulletin summary; the bulletin's own steps section was cut off in my read).
Secure Private Access Hybrid deployments using NetScaler instances are also affected.

03 · The fix

✓ Verified Nov 13

Exploited: No reports yet
Public exploit: None on GitHub
EPSS: Not scored
Last updated: Nov 13, 2026

How it unfolded

2 events · Nov 13, 2026 → Nov 13, 2026

Nov 13, 202608:44 UTCNVD CVE-2026-111334
Nov 13, 202608:46 UTCInfraStack Analyst Read Citrix bulletin CTX697305 (fixed builds, EPA precondition: VPN/AAA vserver with EPA; no workaround). Caveats: bulletin page text dropped the CVE id on the EPA row and a mirror (axacom) labels that row CVE-2026-111344; NVD ties 111334 to CTX697305 with the same versions, so possible id typo, unconfirmed. 13.1 and FIPS ranges are in fix text only, not product rows. No exploitation or PoC seen; description says DoS/erroneous behavior, though CVSS vector has high C/I/A. Sibling CVE-2026-120868 (default config) is the more urgent one. Web search worked; X not checked.moreless

What the sources say, verbatim

172 characters

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Sources and references

NVD: CVE-2026-111334Nov 13, 2026
Citrix NetScaler ADC and Gateway Security Bulletin CTX697305Advisory · support.citrix.com
heise: Attackers can take Citrix NetScaler ADC and Gateway offlineMentions it · heise.de

This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.

Are you affected?

Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.

InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.

InfraStack checks it against your stack and answers on your report, with the evidence and the fix.

Run the check

Get the next NetScaler ADC threat the day it hits your stack.

Start free

Post Share

CRITICAL9.3CVSS · 50a63c94-1ea7-4568-8c11-eb79e7c5a2b5

NO KNOWN
EXPLOIT

NETSCALER ADC · CVE-2026-111334 · Infrastructure

Citrix NetScaler ADC and Gateway: memory overflow in Endpoint Analysis (EPA/EPAS) can cause erroneous behavior or denial of service

FIX → 14.1-73.57 ✓ verified

first public Nov 13, 2026 · 2 sources

Check it with your coding agent

It reads this page and tells you if your code or app is affected.

Claude CodeCodexCursorAdd to your agent

01 · Who is affected

NetScaler ADC< 14.1-73.57fixed in 14.1-73.57
NetScaler Gateway< 14.1-73.57fixed in 14.1-73.57

Not affected if citrix-managed-cloud, no-epa-configured

Who cares citrix, endpoint-analysis, netscaler, netscaler-gateway, self-hosted, vpn

02 · How to check

Run show ns version; you are in range if it is below 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS or 13.1-37.293 (FIPS/NDcPP).
Citrix's precondition: the appliance is a VPN virtual server or an authentication (AAA) virtual server with Endpoint Analysis. Look in ns.conf for 'add authentication epaAction', 'add aaa preauthenticationpolicy', or clientSecurity in the VPN parameter or session action (check commands per fetched bulletin summary; the bulletin's own steps section was cut off in my read).
Secure Private Access Hybrid deployments using NetScaler instances are also affected.

03 · The fix

✓ Verified Nov 13

Exploited: No reports yet
Public exploit: None on GitHub
EPSS: Not scored
Last updated: Nov 13, 2026

How it unfolded

2 events · Nov 13, 2026 → Nov 13, 2026

Nov 13, 202608:44 UTCNVD CVE-2026-111334
Nov 13, 202608:46 UTCInfraStack Analyst Read Citrix bulletin CTX697305 (fixed builds, EPA precondition: VPN/AAA vserver with EPA; no workaround). Caveats: bulletin page text dropped the CVE id on the EPA row and a mirror (axacom) labels that row CVE-2026-111344; NVD ties 111334 to CTX697305 with the same versions, so possible id typo, unconfirmed. 13.1 and FIPS ranges are in fix text only, not product rows. No exploitation or PoC seen; description says DoS/erroneous behavior, though CVSS vector has high C/I/A. Sibling CVE-2026-120868 (default config) is the more urgent one. Web search worked; X not checked.moreless

What the sources say, verbatim

172 characters

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Sources and references

NVD: CVE-2026-111334Nov 13, 2026
Citrix NetScaler ADC and Gateway Security Bulletin CTX697305Advisory · support.citrix.com
heise: Attackers can take Citrix NetScaler ADC and Gateway offlineMentions it · heise.de

NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.

Are you affected?

Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.

InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.

InfraStack checks it against your stack and answers on your report, with the evidence and the fix.

Run the check

Get the next NetScaler ADC threat the day it hits your stack.

Start free

Citrix NetScaler ADC and Gateway: memory overflow in Endpoint Analysis (EPA/EPAS) can cause erroneous behavior or denial of service

01 · Who is affected

02 · How to check

03 · The fix

How it unfolded

What the sources say, verbatim

Sources and references

Read next

Get the next NetScaler ADC threat the day it hits your stack.

Citrix NetScaler ADC and Gateway: memory overflow in Endpoint Analysis (EPA/EPAS) can cause erroneous behavior or denial of service

01 · Who is affected

02 · How to check

03 · The fix

How it unfolded

What the sources say, verbatim

Sources and references

Read next

Get the next NetScaler ADC threat the day it hits your stack.