CVE-2026-111339 · Infrastructure
NO FIX YET
Citrix NetScaler ADC and NetScaler Gateway have a memory overflow in the Application Firewall when it decompresses and inspects data. The sources say it can cause unpredictable or erroneous behavior or a denial of service.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Organizations running Citrix NetScaler ADC or NetScaler Gateway with the Application Firewall feature in use. The sources do not say which versions or configurations are affected, so the exact exposure is unknown.
Who cares application-firewall, citrix, netscaler, self-hosted
Unknown from the sources.
No fix yet, per the sources.
Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This page as .md · .json · CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.