Memory Corruption in NetScaler ADC or Gateway

Publication date: 2026-10-08

Last updated on: 2026-10-08

Assigner: NetScaler

Description

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements: * For the following versions: Applicable only when configured as a SAML IdP: * NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive * NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive * NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive * NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive For the following versions: Applicable only when configured as a SAML SP or SAML IdP: * NetScaler ADC and NetScaler Gateway before 14.1-73.37 * NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS * NetScaler ADC and NetScaler Gateway before 13.1-64.23 * NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-08

Last Modified

2026-10-08

Generated

2026-10-09

AI Q&A

2026-10-09

EPSS Evaluated

N/A

NVD

CVE-2026-107406

Affected Vendors & Products

Vendor	Product	Version / Range
NetScaler	ADC	0
NetScaler	ADC	0
NetScaler	ADC	0
NetScaler	ADC	0
NetScaler	Gateway	0
NetScaler	Gateway	0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway that can lead to Remote Code Execution or Denial of Service. It specifically affects systems configured as SAML Service Providers (SP) or Identity Providers (IdP) within certain version ranges.

Impact Analysis

An attacker could exploit this flaw to execute arbitrary code on your system or cause a denial of service, potentially leading to unauthorized access, data breaches, or service disruption. Systems running vulnerable versions of NetScaler ADC or Gateway are at risk if configured for SAML operations.

Mitigation Strategies

Update NetScaler ADC or NetScaler Gateway to versions 14.1-73.37 or later, 14.1-73.37 FIPS or later, 13.1-64.23 or later, or 13.1-NDcPP 13.1-37.279 or later. If configured as SAML IdP, ensure versions are 14.1-73.37 or later, 14.1-73.37 FIPS or later, 13.1-64.23 or later, or 13.1-NDcPP 13.1-37.279 or later.

Hi! I’m here to help you understand CVE-2026-107406. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70