# CVE-2026-120868

Remote memory overflow in Citrix NetScaler packet processing causing service outage

- Page: https://www.vulneraibility.com/cve/CVE-2026-120868
- CVSS: 9.3
- Known exploited: not in CISA KEV as of our last sync
- Published: 2026-11-12

## Affected versions

- Citrix NetScaler ADC: affected < 14.1-73.57; < 13.1-64.39; < 14.1-73.58 FIPS; < 13.1-37.293 FIPs and NDcPP
- Citrix NetScaler Gateway: affected < 14.1-73.57; < 13.1-64.39

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote Denial of Service: crafted packets trigger memory overflow causing ADC/Gateway process crash and service outage.

## Action

Immediate action required

## Recommendation

Apply Citrix patches/workarounds ASAP; block/inspect traffic to ADC/Gateway and monitor logs

## References

- [other] https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697305

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.