CVE-2026-111336: Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Memory overflow in HTTP/2 handling can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
The affected products are Citrix NetScaler ADC and Citrix NetScaler Gateway. The provided information does not identify specific affected versions, configurations, or deployment roles.
Does exploitation require authentication or user interaction?
The vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required. The attack requirements also include an unspecified attack condition (AT:P).
What impact can exploitation have?
The issue can cause unpredictable or erroneous behavior or denial of service. The supplied severity vector indicates high availability impact and low impact to confidentiality and integrity, including potential impacts beyond the vulnerable component.