CVE-2026-120866: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Published Nov 13, 2026
·Updated
Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
Event History
Nov 13, 2026
CVE Published
via MITRE·08:12 AM
Data Sourced
via MITRE·08:12 AM
Description
Data Sourced
via NVD·09:17 AM
DescriptionSeverity
Frequently Asked Questions
1
Which deployments are exposed to this issue?
Citrix NetScaler ADC and Citrix NetScaler Gateway deployments using BGP dynamic routing are implicated. The provided information does not identify affected versions or indicate whether BGP is enabled by default.
2
What access does an attacker need to exploit it?
The vector is adjacent network access, and no privileges or user interaction are required. Exploitation has high attack complexity.
3
What could exploitation cause?
The issue can cause unpredictable or erroneous behavior or denial of service. The supplied severity vector also indicates potential high impact to confidentiality, integrity, and availability of the vulnerable component.