CVE-2026-107406

highpriority · track · 11EPSS 0.019 · 79 %ileexploit · PoCDENLRU
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
1 exploit · PoC
Likely / severe?
1.87% (79th) EPSS
CVSS 8.1 · high
Is it mine?
28 products
Check your exposure
Who says so?
3 sources
fstec_bdu · cert_bund · ncsc_nl

EPSS · scored 2026-10-27

Memory overflow vulnerability leading to Remote Code Execution or Denial of Service Vulnerability in NetScaler ADC. NetScaler ADC or NetScaler Gateway must be configured as a SAML SP or SAML IdP, subject to the following version-specific requirements:   * For the following versions: Applicable only when configured as a SAML IdP: * NetScaler ADC and NetScaler Gateway between 14.1-73.37 and 14.1-73.41, inclusive * NetScaler ADC 14.1-FIPS between 14.1-73.37 FIPS and 14.1-73.41 FIPS, inclusive * NetScaler ADC and NetScaler Gateway between 13.1-64.23 and 13.1-64.28, inclusive * NetScaler ADC 13.1-FIPS between 13.1-NDcPP 13.1-37.279 and 13.1- 37.282, inclusive   For the following versions: Applicable only when configured as a SAML SP or SAML IdP: * NetScaler ADC and NetScaler Gateway before 14.1-73.37  * NetScaler ADC 14.1-FIPS before 14.1-73.37 FIPS  * NetScaler ADC and NetScaler Gateway before 13.1-64.23 * NetScaler ADC 13.1-FIPS before13.1-NDcPP 13.1-37.279

01

cvss

Technical severity, 0–10. One row per scoring source.

9.5
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.1–9.5

v3.18.1highAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v4.09.5criticalCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary
v4.09criticalCVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)
02

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119USCWE-119US
04

exploits (1)

Public proof-of-concept and weaponised exploit code.

05

affected products (28)

Products and version ranges known to be affected.

showing 20 of 28
06

advisories (2)

Vendor and ecosystem advisories describing this.

  • NCSC-2026-0410Kwetsbaarheid verholpen in Citrix NetScaler ADC en GatewayNL2026-10-09csaf · ncsc_nlNL

    Citrix heeft een kwetsbaarheid verholpen in NetScaler ADC en Gateway producten wanneer deze zijn geconfigureerd als SAML Service Provider (SP) of Identity Provider (IdP).

  • WID-SEC-W-2026-3847Citrix NetScaler ADC und Gateway: Schwachstelle ermöglicht Codeausführung und DoSDeutsch2026-10-08csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Citrix Systems NetScaler ausnutzen, um beliebigen Programmcode auszuführen und um einen Denial of Service Angriff durchzuführen.

07

also known as (1)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

fstec_bducert_bundncsc_nlNVDCVE.orgMITRE
published 2026-10-08modified 2026-10-13
09

references (2) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan