---
id: "CVE-2026-120868"
page: "https://infrastack.ai/live/CVE-2026-120868"
kind: "vulnerability"
aliases: ["CVE-2026-120868"]
title: "NetScaler ADC and Gateway: packet processing memory overflow enables denial of service"
severity: "critical"
cvss: 9.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "NetScaler ADC and Gateway 14.1", "fixed": ["14.1-73.57"], "affected": "< 14.1-73.57", "ecosystem": "vendor"}, {"name": "NetScaler ADC and Gateway 13.1", "fixed": ["13.1-64.39"], "affected": "< 13.1-64.39", "ecosystem": "vendor"}, {"name": "NetScaler ADC FIPS 14.1", "fixed": ["14.1-73.58 FIPS"], "affected": "< 14.1-73.58 FIPS", "ecosystem": "vendor"}, {"name": "NetScaler ADC FIPS and NDcPP 13.1", "fixed": ["13.1-37.293"], "affected": "< 13.1-37.293", "ecosystem": "vendor"}]
ecosystems: []
tags: ["citrix", "default-config", "gateway", "infrastructure", "load-balancer", "netscaler", "self-hosted"]
not_affected_if: ["managed-hosting"]
published_at: "2026-11-13T00:20:09+00:00"
first_seen_at: "2026-11-13T00:41:06+00:00"
updated_at: "2026-11-13T00:42:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-120868", "first_seen_at": "2026-11-13T00:41:06+00:00"}, {"source": "analyst", "url": "https://cve.circl.lu/bundle/2a3dceaf-5c20-4b30-8a27-cd020e8b7a68", "first_seen_at": "2026-11-13T00:42:35+00:00", "cites": ["https://cve.circl.lu/bundle/2a3dceaf-5c20-4b30-8a27-cd020e8b7a68", "https://www.cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-1150", "https://securityonline.info/citrix-netscaler-vulnerabilities-november-2026/"]}]
exploit_sources: []
---

# NetScaler ADC and Gateway: packet processing memory overflow enables denial of service

Link for people: https://infrastack.ai/live/CVE-2026-120868 (this .md is for agents)

A memory overflow in packet processing in NetScaler ADC and NetScaler Gateway can lead to unpredictable behavior or denial of service. The sources do not say whether code execution is possible, so the worst case is not confirmed beyond service disruption.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:NetScaler ADC and Gateway 14.1 affected < 14.1-73.57 fixed 14.1-73.57
- vendor:NetScaler ADC and Gateway 13.1 affected < 13.1-64.39 fixed 13.1-64.39
- vendor:NetScaler ADC FIPS 14.1 affected < 14.1-73.58 FIPS fixed 14.1-73.58 FIPS
- vendor:NetScaler ADC FIPS and NDcPP 13.1 affected < 13.1-37.293 fixed 13.1-37.293

## How to check

Run 'show ns version' on each NetScaler ADC/Gateway (or check System > Software in the GUI). You are exposed if the build is older than 14.1-73.57, 13.1-64.39, 14.1-73.58 FIPS or 13.1-37.293 FIPS/NDcPP. No feature or config is needed; every customer-managed appliance is in scope. NetScaler Console Security Advisory can flag it with a version scan.

## Fix

Upgrade NetScaler ADC/Gateway to 14.1-73.57 or later (14.1), 13.1-64.39 or later (13.1), 14.1-73.58 FIPS or later (ADC FIPS), 13.1-37.293 FIPS/NDcPP or later. Secure Private Access Hybrid deployments must upgrade their NetScaler instances too.

## Timeline

- 2026-11-13T00:41:06+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-120868
- 2026-11-13T00:42:35+00:00 analyst https://cve.circl.lu/bundle/2a3dceaf-5c20-4b30-8a27-cd020e8b7a68 — Versions and default-config scope from Citrix CTX697305 text as reproduced by CIRCL; Citrix page itself would not load, so nothing marked verified. Bulletin describes memory overflow leading to erratic behavior or DoS; code execution not stated. Reports say not exploited, no public PoC; watchTowr says it is reacting for clients.

## Documents

- [describes] CIRCL bundle: copy of Citrix CTX697305 text https://cve.circl.lu/bundle/2a3dceaf-5c20-4b30-8a27-cd020e8b7a68
- [describes] Cyber Centre AV26-1150 https://www.cyber.gc.ca/en/alerts-advisories/citrix-security-advisory-av26-1150
- [describes] Citrix NetScaler Vulnerabilities: 31 CVEs Fixed https://securityonline.info/citrix-netscaler-vulnerabilities-november-2026/
- [discussion] @watchtowrcyber: The watchTowr team is currently rapidly reacting to multiple Memory Overflow vul https://x.com/watchtowrcyber/status/2120876488559853791

## From the sources

Memory overflow in Packet Processing can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_