---
id: "CVE-2026-111334"
page: "https://infrastack.ai/live/CVE-2026-111334"
kind: "vulnerability"
aliases: ["CVE-2026-111334"]
title: "Citrix NetScaler ADC and Gateway: memory overflow in Endpoint Analysis (EPA/EPAS) can cause erroneous behavior or denial of service"
severity: "critical"
cvss: 9.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "NetScaler ADC", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}, {"name": "NetScaler Gateway", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}]
ecosystems: []
tags: ["citrix", "endpoint-analysis", "infrastructure", "netscaler", "netscaler-gateway", "self-hosted", "vpn"]
not_affected_if: ["citrix-managed-cloud", "no-epa-configured"]
published_at: "2026-11-13T08:17:15+00:00"
first_seen_at: "2026-11-13T08:44:23+00:00"
updated_at: "2026-11-13T08:46:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111334", "first_seen_at": "2026-11-13T08:44:23+00:00"}, {"source": "analyst", "url": "https://support.citrix.com/external/article/CTX697305", "first_seen_at": "2026-11-13T08:46:25+00:00", "cites": ["https://support.citrix.com/external/article/CTX697305", "https://www.heise.de/en/news/Attackers-can-take-Citrix-NetScaler-ADC-and-NetScaler-Gateway-offline-11523095.html"]}]
exploit_sources: []
---

# Citrix NetScaler ADC and Gateway: memory overflow in Endpoint Analysis (EPA/EPAS) can cause erroneous behavior or denial of service

Link for people: https://infrastack.ai/live/CVE-2026-111334 (this .md is for agents)

A memory overflow in Endpoint Analysis (EPA/EPAS) in Citrix NetScaler ADC and NetScaler Gateway can cause unpredictable or erroneous behavior, or a denial of service. The sources do not state that an attacker can run code or read data from this flaw.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NetScaler ADC affected < 14.1-73.57 fixed 14.1-73.57
- vendor:NetScaler Gateway affected < 14.1-73.57 fixed 14.1-73.57

## How to check

- Run show ns version; you are in range if it is below 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS or 13.1-37.293 (FIPS/NDcPP).
- Citrix's precondition: the appliance is a VPN virtual server or an authentication (AAA) virtual server with Endpoint Analysis. Look in ns.conf for 'add authentication epaAction', 'add aaa preauthenticationpolicy', or clientSecurity in the VPN parameter or session action (check commands per fetched bulletin summary; the bulletin's own steps section was cut off in my read).
- Secure Private Access Hybrid deployments using NetScaler instances are also affected.

## Fix

Upgrade to 14.1-73.57 or later (14.1); 13.1-64.39 or later (13.1); 14.1-73.58 FIPS or later (14.1-FIPS); 13.1-37.293 or later (13.1-FIPS and 13.1-NDcPP). Citrix lists no workaround.

## Timeline

- 2026-11-13T08:44:23+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111334
- 2026-11-13T08:46:25+00:00 analyst https://support.citrix.com/external/article/CTX697305 — Read Citrix bulletin CTX697305 (fixed builds, EPA precondition: VPN/AAA vserver with EPA; no workaround). Caveats: bulletin page text dropped the CVE id on the EPA row and a mirror (axacom) labels that row CVE-2026-111344; NVD ties 111334 to CTX697305 with the same versions, so possible id typo, unconfirmed. 13.1 and FIPS ranges are in fix text only, not product rows. No exploitation or PoC seen; description says DoS/erroneous behavior, though CVSS vector has high C/I/A. Sibling CVE-2026-120868 (default config) is the more urgent one. Web search worked; X not checked.

## Documents

- [advisory] Citrix NetScaler ADC and Gateway Security Bulletin CTX697305 https://support.citrix.com/external/article/CTX697305
- [mentions] heise: Attackers can take Citrix NetScaler ADC and Gateway offline https://www.heise.de/en/news/Attackers-can-take-Citrix-NetScaler-ADC-and-NetScaler-Gateway-offline-11523095.html

## From the sources

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_