{"id":"CVE-2026-111338","kind":"vulnerability","aliases":["CVE-2026-111338"],"related":[],"title":"Citrix NetScaler: authentication secrets written to log files","description":"Sensitive authentication material written to a log file in Citrix NetScaler ADC and Citrix NetScaler Gateway.","summary":"Citrix NetScaler ADC and NetScaler Gateway write sensitive authentication material to a log file. Anyone who can read those logs could obtain credentials or session material usable to log in.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["citrix","infrastructure","netscaler","netscaler-gateway","self-hosted"],"not_affected_if":[],"how_to_check":"- Confirm the NetScaler ADC or NetScaler Gateway version in use against the product ranges, which the sources do not list.","fix":null,"status":"open","published_at":"2026-11-13T08:17:16+00:00","first_seen_at":"2026-11-13T08:44:23+00:00","triaged_at":"2026-11-13T08:45:24+00:00","updated_at":"2026-11-13T08:45:24+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-11-13T08:45:24Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Citrix NetScaler: authentication secrets written to log files","impact":"medium","summary":"Citrix NetScaler ADC and NetScaler Gateway write sensitive authentication material to a log file. Anyone who can read those logs could obtain credentials or session material usable to log in.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["citrix","netscaler","netscaler-gateway","self-hosted"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Authentication secrets readable from log files, enabling account takeover","analyst_note":"Find the affected version ranges and fixed versions from Citrix's own advisory for CVE-2026-111338; the NVD entry gives no product ranges.","how_to_check":"- Confirm the NetScaler ADC or NetScaler Gateway version in use against the product ranges, which the sources do not list.\n- unknown","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Organizations running Citrix NetScaler ADC or NetScaler Gateway appliances. The sources do not state which versions or configurations are affected, so the exposed range is unknown.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000686,"input_tokens":4499,"output_tokens":473,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111338':11A,14A '-2026':10A,13A 'adc':26B,64C 'anyon':38B 'authent':3A,32B,54C 'citrix':1A,15B,24B,62C,66C 'could':44B 'credenti':46B 'cve':9A,12A 'file':8A,37B,60C 'gateway':20B,29B,68C 'host':23B 'infrastructur':16B 'log':7A,36B,43B,52B,59C 'materi':33B,49B,55C 'netscal':2A,17B,19B,25B,28B,63C,67C 'netscaler-gateway':18B 'obtain':45B 'read':41B 'secret':4A 'self':22B 'self-host':21B 'sensit':31B,53C 'session':48B 'usabl':50B 'write':30B 'written':5A,56C","nicknames":[],"mitigations":[],"who_affected":"Organizations running Citrix NetScaler ADC or NetScaler Gateway appliances. The sources do not state which versions or configurations are affected, so the exposed range is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["citrix","infrastructure","medium","netscaler","netscalergateway","selfhosted"],"campaign_type":null,"search_a":"'-111338':11A,14A '-2026':10A,13A 'authent':3A 'citrix':1A 'cve':9A,12A 'file':8A 'log':7A 'netscal':2A 'secret':4A 'written':5A","search_b":"'adc':26B 'anyon':38B 'authent':32B 'citrix':15B,24B 'could':44B 'credenti':46B 'file':37B 'gateway':20B,29B 'host':23B 'infrastructur':16B 'log':36B,43B,52B 'materi':33B,49B 'netscal':17B,19B,25B,28B 'netscaler-gateway':18B 'obtain':45B 'read':41B 'self':22B 'self-host':21B 'sensit':31B 'session':48B 'usabl':50B 'write':30B","search_c":"'adc':64C 'authent':54C 'citrix':62C,66C 'file':60C 'gateway':68C 'log':59C 'materi':55C 'netscal':63C,67C 'sensit':53C 'written':56C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-13T08:17:16+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"50a63c94-1ea7-4568-8c11-eb79e7c5a2b5","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111338","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111338","severity":null,"published_at":"2026-11-13T08:17:16+00:00","modified_at":"2026-11-13T08:17:16+00:00","first_seen_at":"2026-11-13T08:44:23+00:00","fetched_at":"2026-11-13T08:44:23+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}