CITRIX NETSCALER ADC · CVE-2026-111341 · Infrastructure
FIX → 14.1-73.57 · 13.1-64.39 +2 ✓ verified
A memory overflow in the client-certificate authentication path of Citrix NetScaler ADC and NetScaler Gateway can cause unpredictable or erroneous behavior. The sources say it can also lead to a denial of service.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Customer-managed Citrix NetScaler ADC and Gateway appliances that have a certificate authentication action (CertAction) configured. Appliances without one, and Citrix-managed cloud services, can skip it. Impact per Citrix is erratic behavior or denial of service.
Not affected if managed-hosting, no-certaction
Who cares citrix, client-certificate, netscaler, netscaler-gateway, self-hosted
show version; builds older than the fixed ones above are affectedMemory overflow in client-certificate authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
Upgrade to 14.1-73.57 · 13.1-64.39 +2