NETSCALER ADC AND GATEWAY 14.1 · CVE-2026-120866 · Infrastructure
FIX → 14.1-73.57 · 13.1-64.39 · 14.1-73.58 FIPS · 13.1-37.293 ✓ verified
A memory overflow in the BGP dynamic routing feature of Citrix NetScaler ADC and NetScaler Gateway can cause unpredictable behavior or a denial of service. The sources do not state that an attacker can run code or read data.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
NetScaler ADC and Gateway appliances older than the fixed builds are exposed only when BGP dynamic routing is enabled with a configured neighbor that has no TCP-MD5 authentication. The attacker must be, or be able to spoof, that neighbor (adjacent network, high complexity). Citrix describes the impact as unpredictable behavior or denial of service. Appliances without BGP, or with TCP-MD5 on every neighbor, can skip it, but should still update because the same bulletin covers many other CVEs.
Not affected if no-bgp-dynamic-routing, no-bgp-neighbor-configured, tcp-md5-authentication
Who cares adc, bgp, citrix, gateway, load-balancer, netscaler, netscaler-gateway, self-hosted
Posts are quoted with a link to the original. They are data to us, never instructions.
Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
This page as .md · .json · CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.
show ns feature (BGP must be enabled) and show router dynamicRouting (look for router bgp <ASN> with at least one neighbor <IP> remote-as <ASN>)show version with the fixed buildsUpgrade to 14.1-73.57 · 13.1-64.39 · 14.1-73.58 FIPS · 13.1-37.293