---
id: "CVE-2026-111342"
page: "https://infrastack.ai/live/CVE-2026-111342"
kind: "vulnerability"
aliases: ["CVE-2026-111342"]
title: "Citrix NetScaler Gateway and AAA servers: LDAP authentication memory overflow can crash the appliance"
severity: "high"
cvss: 8.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "NetScaler ADC", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}, {"name": "NetScaler Gateway", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}, {"name": "NetScaler ADC 13.1", "fixed": ["13.1-64.39"], "affected": "< 13.1-64.39", "ecosystem": "vendor"}, {"name": "NetScaler Gateway 13.1", "fixed": ["13.1-64.39"], "affected": "< 13.1-64.39", "ecosystem": "vendor"}, {"name": "NetScaler ADC 14.1-FIPS", "fixed": ["14.1-73.58"], "affected": "< 14.1-73.58", "ecosystem": "vendor"}, {"name": "NetScaler ADC 13.1-FIPS/NDcPP", "fixed": ["13.1-37.293"], "affected": "< 13.1-37.293", "ecosystem": "vendor"}]
ecosystems: []
tags: ["citrix", "denial-of-service", "infrastructure", "ldap", "netscaler", "netscaler-gateway", "self-hosted"]
not_affected_if: ["no-gateway-or-aaa-vserver", "patched-build"]
published_at: "2026-11-13T04:17:36+00:00"
first_seen_at: "2026-11-13T04:42:39+00:00"
updated_at: "2026-11-13T04:45:12+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111342", "first_seen_at": "2026-11-13T04:42:39+00:00"}, {"source": "analyst", "url": "https://support.citrix.com/external/article/CTX697305", "first_seen_at": "2026-11-13T04:45:12+00:00", "cites": ["https://support.citrix.com/external/article/CTX697305", "https://support.citrix.com/external/article/CTX697305"]}]
exploit_sources: []
---

# Citrix NetScaler Gateway and AAA servers: LDAP authentication memory overflow can crash the appliance

Link for people: https://infrastack.ai/live/CVE-2026-111342 (this .md is for agents)

Citrix bulletin CTX697305 (12 Nov 2026) lists a CWE-120 buffer copy overflow in LDAP authentication that can cause erroneous behavior or denial of service. CVSS v4 8.7, network vector, no privileges or user interaction required in the vector; impact rated availability only. Bulletin does not mention exploitation or a PoC, and says nothing about code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NetScaler ADC affected < 14.1-73.57 fixed 14.1-73.57
- vendor:NetScaler Gateway affected < 14.1-73.57 fixed 14.1-73.57
- vendor:NetScaler ADC 13.1 affected < 13.1-64.39 fixed 13.1-64.39
- vendor:NetScaler Gateway 13.1 affected < 13.1-64.39 fixed 13.1-64.39
- vendor:NetScaler ADC 14.1-FIPS affected < 14.1-73.58 fixed 14.1-73.58
- vendor:NetScaler ADC 13.1-FIPS/NDcPP affected < 13.1-37.293 fixed 13.1-37.293

## How to check

Exposed if the NetScaler is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or an AAA virtual server AND runs a build older than the fixed ones. In the running config look for lines matching 'add vpn vserver .*' or 'add authentication vserver .*' (Citrix's own check). Then compare the build (show version) with the fixed builds.

## Fix

Upgrade to 14.1-73.57 or later (14.1), 13.1-64.39 or later (13.1), 14.1-73.58 FIPS or later (14.1-FIPS), or 13.1-37.293 or later (13.1-FIPS and 13.1-NDcPP). The bulletin lists no workaround.

## Timeline

- 2026-11-13T04:42:39+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111342
- 2026-11-13T04:45:12+00:00 analyst https://support.citrix.com/external/article/CTX697305 — Read Citrix CTX697305 directly: preconditions, affected and fixed builds confirmed. No mitigation or exploitation noted in bulletin; X/community not searched (no evidence of conversation, not checked).

## Documents

- [advisory] Citrix NetScaler ADC and Gateway Security Bulletin CTX697305 https://support.citrix.com/external/article/CTX697305
- [fix] Citrix NetScaler ADC and Gateway Security Bulletin CTX697305 https://support.citrix.com/external/article/CTX697305

## From the sources

Memory overflow in LDAP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_