Critical vulnerabilities
4 critical vulnerabilities in NetScaler ADC and Gateway
4 vulnerabilities rated critical (CVSS 9.0 or higher) found on 13 November 2026: NetScaler ADC and Gateway (4).
- 4 critical
Denial of service in NetScaler ADC and Gateway · Servers and applications
CVE-2026-107410
Memory overflow in NetScaler Push can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
- Severity
- Critical 9.3
- Published
- 13 Nov 2026
- Fixed in
- 13.1-64.39, 14.1-73.57, 14.1-73.58 FIPS
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Read data · Change data · Take it down
| Software | Affected versions |
|---|---|
| NetScaler ADC and GatewayServers and applications |
|
| NetScaler ADC and GatewayServers and applications |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-107410
Memory corruption in NetScaler ADC and Gateway · Servers and applications
CVE-2026-107409
Memory corruption in DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or a Denial of Service in NetScaler ADC and NetScaler Gateway
- Severity
- Critical 9.3
- Published
- 13 Nov 2026
- Fixed in
- 13.1-64.39, 14.1-73.57, 14.1-73.58 FIPS
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Read data · Change data · Take it down
| Software | Affected versions |
|---|---|
| NetScaler ADC and GatewayServers and applications |
|
| NetScaler ADC and GatewayServers and applications |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-107409
Memory corruption in NetScaler ADC and Gateway · Servers and applications
CVE-2026-107408
Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
- Severity
- Critical 9.3
- Published
- 13 Nov 2026
- Fixed in
- 13.1-64.39, 14.1-73.57, 14.1-73.58 FIPS
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Read data · Change data · Take it down
| Software | Affected versions |
|---|---|
| NetScaler ADC and GatewayServers and applications |
|
| NetScaler ADC and GatewayServers and applications |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-107408
Denial of service in NetScaler ADC and Gateway · Servers and applications
CVE-2026-107407
Memory overflow in SMPP traffic can lead to unpredictable or erroneous behavior or Denial of Service in NetScaler ADC and NetScaler Gateway
- Severity
- Critical 9.3
- Published
- 13 Nov 2026
- Fixed in
- 13.1-64.39, 14.1-73.57, 14.1-73.58 FIPS
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Read data · Change data · Take it down
| Software | Affected versions |
|---|---|
| NetScaler ADC and GatewayServers and applications |
|
| NetScaler ADC and GatewayServers and applications |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-107407
From NVD, the CVE Program, OSV.dev with the GitHub Advisory Database, WPVulnerability, WordPress's security advisories and CISA's Known Exploited Vulnerabilities catalog, as they stood when this was written. Each vulnerability's own page has its latest rating and fix. This product uses the NVD API but is not endorsed or certified by the NVD.