CVE-2026-111339: Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Published Nov 13, 2026
·Updated
Memory overflow in Application Firewall data decompression/inspection can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
Event History
Nov 13, 2026
CVE Published
via MITRE·07:45 AM
Data Sourced
via MITRE·07:45 AM
Description
Data Sourced
via NVD·08:17 AM
DescriptionSeverity
Frequently Asked Questions
1
Can this be exploited remotely over the network?
The supplied CVSS vector lists attack vector as local, so exploitation requires local access rather than remote network access.
2
What level of access and interaction does exploitation require?
The CVSS vector indicates low privileges are required and user interaction is required. Attack complexity is rated low.