Threats affecting pkg:deb/citrix/netscaler-adc

CVE-2026-120867 is a high-severity vulnerability in Citrix NetScaler ADC and NetScaler Gateway involving a memory overflow in SSL/TLS/DTLS processing. This flaw can cause unpredictable or erroneous behavior, including denial of service. The issue affects versions prior to 14.1-73.58 and 13.1-64.39. Fixed versions are available, and no known exploits are reported in the wild.

CVE-2026-120865 is a high-severity memory overflow vulnerability in the HTTP/3 (QUIC) implementation of Citrix NetScaler ADC and NetScaler Gateway. This flaw can cause unpredictable or erroneous behavior, including denial of service. It affects multiple versions prior to fixed releases. The vulnerability has a CVSS 4.0 base score of 8.7, indicating significant impact if exploited. Fixed versions are available and should be applied to mitigate the risk.

CVE-2026-120864 is a critical memory overflow vulnerability in the ICA proxy component of Citrix NetScaler ADC and NetScaler Gateway. This flaw can cause unpredictable or erroneous behavior, including denial of service conditions. It affects multiple versions of the product prior to specific fixed releases. The vulnerability has a high CVSS 4.0 score of 9.3, indicating network exploitable without privileges or user interaction. Fixed versions are available, and users should upgrade to these to mitigate the risk.

CVE-2026-120863 is a high-severity vulnerability in Citrix NetScaler ADC and NetScaler Gateway involving a memory overflow in the management plane. This flaw can cause unpredictable or erroneous behavior, including Denial of Service (DoS). The issue affects multiple versions prior to specific fixed releases. No known exploits are reported in the wild.

CVE-2026-120861 is a high-severity vulnerability in Citrix NetScaler ADC involving memory overflow and improper handling in GSLB and geolocation components (MEP, static-proximity, config-sync). This flaw can cause unpredictable or erroneous behavior, including Denial of Service (DoS).

CVE-2026-120860 is a high-severity memory overflow vulnerability in Citrix NetScaler ADC and NetScaler Gateway affecting protocol load-balancing traffic handling for Diameter, SIP-over-TCP, MQTT, and RADIUS. This flaw can cause unpredictable or erroneous behavior, including Denial of Service (DoS). The issue affects versions prior to 14.1-73.58 and 13.1-64.39, with fixes available in these and related releases.

CVE-2026-111339 is a memory overflow vulnerability in the data decompression and inspection functionality of the Citrix NetScaler ADC and NetScaler Gateway Application Firewall. This flaw can cause unpredictable or erroneous behavior, including denial of service. The vulnerability affects certain versions prior to 14.1-73.58 and 13.1-64.39. It has a medium severity rating with a CVSS score of 6.9. Fixed versions are available, and no known exploits are reported in the wild.

CVE-2026-111338 is a vulnerability in Citrix NetScaler ADC and NetScaler Gateway where sensitive authentication material is written to a log file. This exposure could potentially allow unauthorized access to sensitive credentials if the log files are accessed by attackers. The issue affects versions prior to 14.1-73.58 and 13.1-64.39. A fix has been released in these versions to address the vulnerability.

CVE-2026-111337 is a high-severity vulnerability in Citrix NetScaler ADC and NetScaler Gateway involving a memory overflow during Base64 decoding in advanced policy expressions. This flaw can cause unpredictable or erroneous behavior, including denial of service. The issue affects versions prior to 14.1-73.58 and 13.1-64.39, with fixes available in these and later versions.

CVE-2026-111336 is a high-severity vulnerability in Citrix NetScaler ADC and NetScaler Gateway involving a memory overflow in HTTP/2 handling. This flaw can cause unpredictable or erroneous behavior, including denial of service. The issue affects versions prior to 14.1-73.58 and 13.1-64.39, with fixes available in these and related releases.

CVE-2026-111335 is a vulnerability in Citrix NetScaler ADC and NetScaler Gateway where improper request handling can cause a denial-of-service condition resulting in a reboot loop. This issue affects certain versions prior to specified fixed releases. The vulnerability has a medium severity rating with a CVSS score of 6.9.

CVE-2026-111334 is a critical memory overflow vulnerability in the Endpoint Analysis (EPA/EPAS) component of Citrix NetScaler ADC and NetScaler Gateway. This flaw can cause unpredictable or erroneous behavior, including denial of service conditions. The vulnerability affects multiple versions of NetScaler ADC prior to fixed releases. A high-severity CVSS 4.0 score of 9.3 reflects the potential impact of this issue.

CVE-2026-111342 is a high-severity vulnerability in Citrix NetScaler ADC and NetScaler Gateway involving a memory overflow during LDAP authentication. This flaw can cause unpredictable or erroneous behavior, including denial of service. The issue affects versions prior to 14.1-73.58 and 13.1-64.39, with fixes available in these and related releases.

CVE-2026-111340 is a high-severity memory overflow vulnerability in the knowledge-based authentication (KBA) component of Citrix NetScaler ADC and NetScaler Gateway. This flaw can cause unpredictable or erroneous behavior, including denial of service. The vulnerability affects multiple versions prior to specific fixed releases. No known exploits are reported in the wild.

CVE-2026-107415 is a critical memory overflow vulnerability in the Email OTP authentication component of Citrix NetScaler ADC and NetScaler Gateway. This flaw can cause unpredictable or erroneous behavior, including denial of service. It affects specific versions prior to fixed releases. The vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact if exploited.

CVE-2026-107414 is a high-severity vulnerability in Citrix NetScaler ADC and NetScaler Gateway involving a memory overflow in the WebAuth authentication component. This flaw can cause unpredictable or erroneous behavior, including denial of service. The issue affects multiple versions prior to specific fixed releases. A fix is available in versions 14.1-73.58 FIPS, 14.1-73.57, 13.1-64.39, and 13.1-37.293 FIPS and NDcPP.

A memory overflow vulnerability exists in the SAML authentication component of Citrix NetScaler ADC and Gateway. This flaw can cause unpredictable or erroneous behavior, including denial of service. The issue affects multiple versions prior to specific fixed releases. The vulnerability has a high severity score and does not require user interaction or privileges to exploit.

CVE-2026-107411 is a high-severity vulnerability in Citrix NetScaler ADC involving a memory overflow in the RTSP ALG component. This flaw can cause unpredictable or erroneous behavior, including denial of service. The issue affects versions prior to 14.1-73.58 and 13.1-64.39, with fixes available in these and related releases.

CVE-2026-107410 is a critical memory overflow vulnerability in Citrix NetScaler ADC's NetScaler Push component. This flaw can cause unpredictable or erroneous behavior, including denial of service. It affects versions prior to 14.1-73.58 and 13.1-64.39. The vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact if exploited. No known exploits are reported in the wild at this time.

CVE-2026-107409 is a critical memory corruption vulnerability in the DNS-over-HTTPS (DoH) implementation of Citrix NetScaler ADC. This flaw can cause unpredictable or erroneous behavior, including denial of service conditions. The vulnerability affects multiple versions prior to specific fixed releases. A high-severity CVSS 4.0 score of 9.3 reflects the potential impact of this issue.