NETSCALER ADC AND GATEWAY 14.1 · CVE-2026-120861 · Vendor
FIX → 14.1-73.57 · 13.1-64.39 · 14.1-73.58 · 13.1-37.293 ✓ verified
A memory overflow in NetScaler's GSLB and geolocation features (MEP, static-proximity, config-sync) can cause unpredictable or erroneous behavior. The flaw can also be used to cause a denial of service.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Customer-managed NetScaler ADC and Gateway appliances (including those used for Secure Private Access Hybrid) that have a GSLB site with MEP enabled, GSLB static proximity, a geolocation responder policy, or GSLB automatic config sync. Appliances without these features, and Citrix-managed cloud services (which Cloud Software Group updates), can skip it. Citrix rates it CVSS 8.7, network reachable with no authentication, and the impact is denial of service.
Not affected if citrix-managed-cloud, no-gslb
Who cares citrix-netscaler, gslb, load-balancing, self-hosted
Memory overflow / improper handling in GSLB and geolocation (MEP, static-proximity, config-sync) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
add gslb site ... -metricExchange ENABLED, set gslb parameter -automaticConfigSync ENABLED, add gslb vserver <name> <type> -lbmethod STATICPROXIMITY, or a responder policy using CLIENT.IP.SRC.MATCHES_LOCATION(...)Upgrade to 14.1-73.57 · 13.1-64.39 · 14.1-73.58 · 13.1-37.293