CVE-2026-120862: Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
Published Nov 13, 2026
·Updated
Memory overflow in SIP ALG (LSN) and DNS answer-section logging datapaths can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler
Affected Software
1 affected component
Citrix NetScaler
Event History
Nov 13, 2026
CVE Published
via MITRE·08:02 AM
Data Sourced
via MITRE·08:02 AM
Description
Data Sourced
via NVD·08:17 AM
DescriptionSeverity
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The CVSS vector indicates network-based exploitation with low attack complexity. It does not require privileges or user interaction.
2
What is the expected security impact?
The primary impact is high availability impact on the vulnerable system, consistent with denial of service. The vector also indicates low integrity and availability impact on subsequent systems, while confidentiality impact is listed as none.