Loading vulnerability…
LDAP Authentication Memory Overflow in Citrix NetScaler ADC and Gateway
CVE-2026-111342 is a memory overflow vulnerability in the LDAP authentication functionality of Citrix NetScaler ADC and Citrix NetScaler Gateway. Remote exploitation can cause unpredictable or erroneous appliance behavior or denial of service. The vulnerability is rated High with a CVSS v4.0 score of 8.7. Affected releases include 14.1 before 14.1-73.57, 13.1 before 13.1-64.39, ADC 14.1 FIPS before 14.1-73.58, and ADC 13.1 FIPS and NDcPP before 13.1-37.293. The specific vulnerable function and overflow mechanism are not identified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can disrupt appliance operation and the availability of services dependent on the affected NetScaler instance. The CVSS v4.0 assessment assigns high availability impact, with no confidentiality or integrity impact and no impact to subsequent systems. Remote code execution, authentication bypass, and sensitive information disclosure are not established for this vulnerability.
If you can’t patch tonight, do this now.
No vulnerability-specific interim workaround is documented. Review LDAP authentication configuration to identify potentially exposed appliances, but do not delay installation of the vendor updates.
Patch, then assume compromise.
Upgrade customer-managed NetScaler ADC and Gateway appliances to 14.1-73.57 or later, or 13.1-64.39 or later within the applicable release branch. Upgrade NetScaler ADC 14.1 FIPS to 14.1-73.58 or later, and ADC 13.1 FIPS or NDcPP to 13.1-37.293 or later in the respective branch. Apply the applicable upgrades to NetScaler instances supporting Secure Private Access Hybrid deployments. Follow Citrix bulletin CTX697305 for installation guidance.
No public exploits tracked yet. Mallory keeps watching.
12 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.