CVE-2026-111335Citrix NetScaler ADC
NVD
Vulnerability Summary
Improper request handling can lead to a denial-of-service / reboot-loop condition in Citrix NetScaler ADC and Citrix NetScaler Gateway.
CVSS v4.0 Base Metrics — Score 6.9 (MEDIUM)
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:LAttack VectorLocal
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredNone
User InteractionNone
Confidentiality (Vulnerable System)None
Integrity (Vulnerable System)None
Availability (Vulnerable System)High
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)Low
Affected & Patched Versions
- Citrix NetScaler ADC < 14.1-73.57
- Citrix NetScaler ADC < 13.1-64.39
- Citrix NetScaler ADC < 14.1-73.58 FIPS
- Citrix NetScaler ADC < 13.1-37.293 FIPs and NDcPP
- Citrix NetScaler Gateway < 14.1-73.57
- Citrix NetScaler Gateway < 13.1-64.39
- Citrix NetScaler ADC 14.1-73.57
- Citrix NetScaler ADC 13.1-64.39
- Citrix NetScaler ADC 14.1-73.58 FIPS
- Citrix NetScaler ADC 13.1-37.293 FIPs and NDcPP
- Citrix NetScaler Gateway 14.1-73.57
- Citrix NetScaler Gateway 13.1-64.39
What to do
Fix it during your normal patch cycle. No exploitation is confirmed yet.
- Check whether you run Citrix NetScaler ADC and which version.
- Update to a patched version listed above, then confirm the new version.
Timeline
- Nov 13, 2026Published
- Nov 13, 2026Record last modified
Score, severity and exploitation changes are tracked from the day Watchtower started logging them.
Get notified about new Citrix CVEsYou are reading CVE-2026-111335. Get an email when KEV listings, exploits or new CVEs match your stack.
Notify me about Citrix CVEsMore Citrix NetScaler ADC CVEs
External References
Data last checked: Nov 13, 2026 08:12 (site time)