CVE-2026-107415: Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Citrix NetScaler ADC and Citrix NetScaler Gateway deployments using Email OTP authentication are implicated. The provided information does not state whether systems without Email OTP authentication enabled are affected.
What impact should responders plan for?
The reported impact includes unpredictable or erroneous behavior and denial of service. The provided information does not describe data exposure, authentication bypass, or remote code execution.
What must an attacker do to exploit the issue?
The available information identifies Email OTP authentication as the affected component but does not specify attacker access requirements, interaction requirements, or a particular exploit request.