Loading vulnerability…
RTSP ALG Memory Overflow in Citrix NetScaler
CVE-2026-107411 is a memory overflow vulnerability in the Real Time Streaming Protocol application-layer gateway (RTSP ALG) component of Citrix NetScaler ADC and NetScaler Gateway. Network-based exploitation can cause unpredictable or erroneous appliance behavior or denial of service. The vulnerability is rated High with a CVSS v4.0 score of 8.7. The exact vulnerable function and triggering input are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can disrupt appliance availability and services delivered through the affected NetScaler instance. The CVSS v4.0 assessment identifies high availability impact to the vulnerable system, with no confidentiality or integrity impact and no impact to subsequent systems. Arbitrary code execution and sensitive information disclosure are not established for this vulnerability.
If you can’t patch tonight, do this now.
No vendor-provided interim workaround is identified. Review appliance configuration against the RTSP ALG prerequisites in Citrix bulletin CTX697305 to determine exposure, without delaying installation of the fixed release.
Patch, then assume compromise.
Apply the updates specified in Citrix bulletin CTX697305: upgrade NetScaler ADC and NetScaler Gateway 14.1 to 14.1-73.57 or later, or 13.1 to 13.1-64.39 or later; upgrade NetScaler ADC 14.1-FIPS to 14.1-73.58 or later; and upgrade NetScaler ADC 13.1-FIPS and 13.1-NDcPP to 13.1-37.293 or later in their respective branches. Upgrade affected NetScaler instances used in Secure Private Access Hybrid deployments as well.
No public exploits tracked yet. Mallory keeps watching.
9 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.