Cloud Software Group: Memory Vulnerabilities in NetScaler ADC and NetScaler Gateway (CVE-2026-120868)
Cloud Software Group has disclosed 28 memory-related vulnerabilities in NetScaler ADC and NetScaler Gateway, including CVE-2026-120868, which affects all deployments and may cause denial of service.
CVE search metadata
CVE search record: CVE-2026-120868. KEV: no. Product: NetScaler ADC, NetScaler Gateway. Brief: Cloud Software Group: Memory Vulnerabilities in NetScaler ADC and NetScaler Gateway (CVE-2026-120868). Brief link: https://feed.craftedsignal.io/briefs/2026-11-netscaler-memory-flaws-cve-2026-120868/
Triage facts
Revision 1- Applicability
- NetScaler ADC, NetScaler Gateway
- Evidence
- Unknown
- Severity
- Medium
- Action
- Elevated
- Sources
- 1 public source
- Freshness
- Revision 1Nov 12, 22:50 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A1Roughly even chance
On 12 November 2026, Cloud Software Group released security bulletins addressing 28 memory-related vulnerabilities within Citrix NetScaler ADC and Citrix NetScaler Gateway products. CVE-2026-120868 is highlighted as a critical issue affecting all deployments, including those utilizing default configurations. While the vendor has reported no evidence of active exploitation or public proof-of-concept availability, the vulnerabilities can lead to unpredictable behavior and denial of service (DoS) conditions.
Impact
Exploitation of these memory vulnerabilities may lead to unpredictable system behavior and denial of service conditions, potentially disrupting access to services provided through NetScaler appliances.
Recommendation
CERT-EU advises immediate patching of all customer-managed NetScaler ADC and NetScaler Gateway appliances. Organizations should prioritize patching internet-facing Gateway and AAA appliances to mitigate the risk of potential exploitation.
Immediate actions
Inventory all internet-facing NetScaler ADC and NetScaler Gateway appliances.
Apply vendor-supplied patches for all affected NetScaler appliances.
Threat Hunt
Monitor NetScaler appliance logs and system health metrics for unexpected service restarts, memory pressure, or crash logs that might indicate successful DoS exploitation.
Data: NetScaler system logs, Appliance health/performance metrics
Mitigations
Upgrade to the vendor-provided fixed releases.
CVE-2026-120868