CVE-2026-111334 PUBLISHED

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway

Assigner: NetScaler
Reserved: 15.10.2026 Published: 13.11.2026 Updated: 13.11.2026

Memory overflow in Endpoint Analysis (EPA/EPAS) can lead to unpredictable or erroneous behavior or a Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
CVSS Score: 9.3

Product Status

Vendor Citrix
Product NetScaler ADC
Versions Default: unaffected
  • affected from 0 to 14.1-73.57 (excl.)
  • affected from 0 to 13.1-64.39 (excl.)
  • affected from 0 to 14.1-73.58 FIPS (excl.)
  • affected from 0 to 13.1-37.293 FIPs and NDcPP (excl.)
Vendor Citrix
Product NetScaler Gateway
Versions Default: unaffected
  • affected from 0 to 14.1-73.57 (excl.)
  • affected from 0 to 13.1-64.39 (excl.)

References