{"id":"CVE-2026-107406","revision":"cb015ffd475c4d738512c5db4b217f34","records":[{"revision":"cb015ffd475c4d738512c5db4b217f34","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-107406","aliases":[],"title":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service","description":"Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC.\n\n\nNetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:\n\n\n\n\u00A0\n\n  *  For the following versions: Applicable only when configured as a\u00A0SAML IdP:\n  *  NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive\n  *  NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive\n  *  NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive\n  *  NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive\n\n\n\n\n\u00A0\n\n\n\nFor the following versions: Applicable only when configured as a\u00A0SAML SP or SAML IdP:\n\n  *  NetScaler ADC and NetScaler Gateway before 14.1-73.37\u00A0\n  *  NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS\u00A0\n  *  NetScaler ADC and NetScaler Gateway before 13.1-64.23\n  *  NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279","state":0,"publishedAt":"2026-10-08T21:18:08.336+00:00","modifiedAt":"2026-10-10T03:55:21.152+00:00","affected":[{"ecosystem":"Vendor product","name":"ADC","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"NetScaler\",\n                    \"product\": \"ADC\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"14.1-73.46\",\n                            \"versionType\": \"patch\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"13.1-64.29\",\n                            \"versionType\": \"patch\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"14.1-73.46 FIPS\",\n                            \"versionType\": \"patch\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"13.1.37.283 FIPS\",\n                            \"versionType\": \"patch\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"},{"ecosystem":"Vendor product","name":"Gateway","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"NetScaler\",\n                    \"product\": \"Gateway\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"14.1-73.46\",\n                            \"versionType\": \"patch\"\n                        },\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"13.1-64.29\",\n                            \"versionType\": \"patch\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L","score":9.5,"severity":"CRITICAL"}],"references":["https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697191"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-107406","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-107406","identifiers":["CVE-2026-107406"]},"retained":false,"historicalAffected":[]}],"coverage":[]}