CVE-2026-107406

Name of the Vulnerable Software and Affected Versions NetScaler ADC and NetScaler Gateway versions prior to 14.1-73.37 NetScaler ADC 14.1-FIPS versions prior to 14.1-73.37 FIPS NetScaler ADC and NetScaler Gateway versions prior to 13.1-64.23 NetScaler ADC 13.1-FIPS versions prior to 13.1-NDcPP 13.1-37.279 NetScaler ADC and NetScaler Gateway versions 14.1-73.37 through 14.1-73.41 NetScaler ADC 14.1-FIPS versions 14.1-73.37 FIPS through 14.1-73.41 FIPS NetScaler ADC and NetScaler Gateway versions 13.1-64.23 through 13.1-64.28 NetScaler ADC 13.1-FIPS versions 13.1-NDcPP 13.1-37.279 through 13.1-37.282

Description A memory overflow issue exists in NetScaler ADC and NetScaler Gateway when configured as a SAML Service Provider (SP) or SAML Identity Provider (IdP). This flaw can be exploited to achieve remote code execution or cause a denial of service. SAML (Security Assertion Markup Language) is an open standard for exchanging authentication and authorization data between parties.

Recommendations Update NetScaler ADC and NetScaler Gateway versions prior to 14.1-73.37 to version 14.1-73.46. Update NetScaler ADC 14.1-FIPS versions prior to 14.1-73.37 FIPS to version 14.1-73.46. Update NetScaler ADC and NetScaler Gateway versions prior to 13.1-64.23 to version 13.1-64.29. Update NetScaler ADC 13.1-FIPS versions prior to 13.1-NDcPP 13.1-37.279 to version 13.1-64.29. Update NetScaler ADC and NetScaler Gateway versions 14.1-73.37 through 14.1-73.41 to version 14.1-73.46. Update NetScaler ADC 14.1-FIPS versions 14.1-73.37 FIPS through 14.1-73.41 FIPS to version 14.1-73.46. Update NetScaler ADC and NetScaler Gateway versions 13.1-64.23 through 13.1-64.28 to version 13.1-64.29. Update NetScaler ADC 13.1-FIPS versions 13.1-NDcPP 13.1-37.279 through 13.1-37.282 to version 13.1-64.29.