CVE-2026-107411

{
  "etk_id": "ETK-2026-4348",
  "cve_id": "CVE-2026-107411",
  "display_id": "CVE-2026-107411",
  "ghsa_id": "GHSA-wmjf-7h46-7cjg",
  "euvd_id": "EUVD-2026-124827",
  "status": "published",
  "anchor_state": "anchored",
  "title": "RTSP ALG memory overflow in Citrix NetScaler ADC",
  "summary": "Citrix NetScaler ADC instances using the RTSP ALG may be affected by a memory-overflow flaw. An attacker able to send RTSP network traffic could cause service disruption or unstable operation when an RTSP load-balancing virtual server or LSN group has RTSP ALG enabled.",
  "mitigation": "Disable RTSP ALG on affected RTSP virtual servers or LSN groups where it is not required. Where RTSP ALG is needed, obtain the vendor's fixed build guidance and upgrade vulnerable appliances.",
  "vendor": "Citrix NetScaler",
  "product": "ADC",
  "affected": [
    {
      "affected_notes": [
        ">= 0, < 14.1-73.58 FIPS",
        ">= 0, < 13.1-37.293 FIPs and NDcPP"
      ],
      "affected_ranges": [
        ">= 0, < 14.1-73.57",
        ">= 0, < 13.1-64.39"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "14.1-73.57",
        "13.1-64.39",
        "14.1-73.58 FIPS",
        "13.1-37.293 FIPs and NDcPP"
      ],
      "package_name": "ADC",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 14.1-73.57",
        ">= 0, < 13.1-64.39"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "14.1-73.57",
        "13.1-64.39"
      ],
      "package_name": "Gateway",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 8.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 12.993813383333332,
  "t0_at": "2026-11-13T02:15:37.209000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-13T02:15:37.209000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-13T02:15:37.209000+00:00",
      "url": "https://github.com/advisories/GHSA-wmjf-7h46-7cjg"
    }
  }
}