CVE-2026-1074159.3Critical
CVE-2026-107415: Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway
Citrix · NetScaler ADC
Vendor fix available · Affected: Citrix NetScaler ADC · Exploitation: not established
ExploitationNot established
Not in CISA KEV as of catalogue 2026.11.10 (10 Nov)
- In CISA KEV: not seen
- Exploited (reported): not seen
- Scanning observed: not seen
- Proof of concept public: not seen
- Not establishedNothing in the sources we check
0.3%probability of exploitation in the next 30 days
27th percentile
050100
Higher than 27% of scored CVEs
9.3CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Memory overflow in Email OTP authentication can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler ADC and Citrix NetScaler Gateway.
Coverage1 article · 1 outlet
First in our coverage: SecurityWeek, 13 Nov.
- Citrix patches critical flaws in NetScaler productsSecurityWeek · first in our coverage · mentions it in passing
New articles also arrive in the RSS feed.