{"id":"CVE-2026-111335","kind":"vulnerability","aliases":["CVE-2026-111335"],"related":[],"title":"Citrix NetScaler ADC and Gateway: bad request crashes into reboot loop","description":"Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway.","summary":"Improper request handling in Citrix NetScaler ADC and NetScaler Gateway can cause a denial-of-service condition that puts the appliance into a reboot loop. An attacker can take the device offline by sending crafted requests, with no confirmed fixed versions in the sources.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["citrix","gateway","infrastructure","load-balancer","netscaler"],"not_affected_if":["unknown"],"how_to_check":"- Identify NetScaler ADC and NetScaler Gateway appliances in your environment and note their firmware versions.\n- Compare the running firmware version against the affected ranges in the Citrix advisory; the sources do not list them.","fix":null,"status":"open","published_at":"2026-11-13T08:17:15+00:00","first_seen_at":"2026-11-13T08:44:23+00:00","triaged_at":"2026-11-13T08:45:25+00:00","updated_at":"2026-11-13T08:45:25+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-13T08:45:25Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Citrix NetScaler ADC and Gateway: bad request crashes into reboot loop","impact":"low","summary":"Improper request handling in Citrix NetScaler ADC and NetScaler Gateway can cause a denial-of-service condition that puts the appliance into a reboot loop. An attacker can take the device offline by sending crafted requests, with no confirmed fixed versions in the sources.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["netscaler","citrix","gateway","load-balancer"],"confidence":0.5,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Appliance enters reboot loop and drops service.","analyst_note":"Find the Citrix advisory for CVE-2026-111335 to get affected and fixed firmware versions and any mitigation setting.","how_to_check":"- Identify NetScaler ADC and NetScaler Gateway appliances in your environment and note their firmware versions.\n- Compare the running firmware version against the affected ranges in the Citrix advisory; the sources do not list them.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"NetScaler ADC and NetScaler Gateway appliances that receive network traffic from untrusted sources are the exposed systems to look at. The sources do not state which configurations or versions are affected, so whether a given appliance is exposed is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000733,"input_tokens":4515,"output_tokens":564,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111335':14A,17A '-2026':13A,16A 'adc':3A,31B,88C 'applianc':46B 'attack':52B 'bad':6A 'balanc':23B 'caus':36B 'citrix':1A,18B,29B,86C,90C 'condit':42B,84C 'confirm':64B 'craft':60B 'crash':8A 'cve':12A,15A 'denial':39B,78C 'denial-of-servic':38B,77C 'devic':56B 'fix':65B 'gateway':5A,19B,34B,92C 'handl':27B,72C 'improp':25B,70C 'infrastructur':20B 'lead':74C 'load':22B 'load-balanc':21B 'loop':11A,50B,83C 'netscal':2A,24B,30B,33B,87C,91C 'offlin':57B 'put':44B 'reboot':10A,49B,82C 'reboot-loop':81C 'request':7A,26B,61B,71C 'send':59B 'servic':41B,80C 'sourc':69B 'take':54B 'version':66B","nicknames":[],"mitigations":[],"who_affected":"NetScaler ADC and NetScaler Gateway appliances that receive network traffic from untrusted sources are the exposed systems to look at. The sources do not state which configurations or versions are affected, so whether a given appliance is exposed is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["citrix","gateway","infrastructure","loadbalancer","medium","netscaler"],"campaign_type":null,"search_a":"'-111335':14A,17A '-2026':13A,16A 'adc':3A 'bad':6A 'citrix':1A 'crash':8A 'cve':12A,15A 'gateway':5A 'loop':11A 'netscal':2A 'reboot':10A 'request':7A","search_b":"'adc':31B 'applianc':46B 'attack':52B 'balanc':23B 'caus':36B 'citrix':18B,29B 'condit':42B 'confirm':64B 'craft':60B 'denial':39B 'denial-of-servic':38B 'devic':56B 'fix':65B 'gateway':19B,34B 'handl':27B 'improp':25B 'infrastructur':20B 'load':22B 'load-balanc':21B 'loop':50B 'netscal':24B,30B,33B 'offlin':57B 'put':44B 'reboot':49B 'request':26B,61B 'send':59B 'servic':41B 'sourc':69B 'take':54B 'version':66B","search_c":"'adc':88C 'citrix':86C,90C 'condit':84C 'denial':78C 'denial-of-servic':77C 'gateway':92C 'handl':72C 'improp':70C 'lead':74C 'loop':83C 'netscal':87C,91C 'reboot':82C 'reboot-loop':81C 'request':71C 'servic':80C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T08:17:15+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111335","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111335","severity":null,"published_at":"2026-11-13T08:17:15+00:00","modified_at":"2026-11-13T08:17:15+00:00","first_seen_at":"2026-11-13T08:44:23+00:00","fetched_at":"2026-11-13T08:44:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}