CVE-2026-107408

Description

Memory corruption in DNS / DNS-over-HTTPS (DoH) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler

OhShit! incidents

• Citrix fixes 28 NetScaler ADC and Gateway flaws and a Console authentication bypass →

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-107408 ↗
• support.citrix.com/support-home/kbsearch/article ↗

Related CVEs

• CVE-2026-107411Citrix NetScaler / ADC · +1CVSS 8.7
• CVE-2026-127277Linksys / EA8100CVSS 9.3
• CVE-2026-107410Citrix NetScaler / ADC · +1CVSS 9.3
• CVE-2026-107409Citrix NetScaler / ADC · +1CVSS 9.3
• CVE-2026-107407Citrix NetScaler / ADC · +1CVSS 9.3
• CVE-2026-127275Linksys / EA8100CVSS 9.3
• CVE-2026-120868Citrix NetScaler / ADC · +1CVSS 9.3
• CVE-2026-68548xyproto / algernonCVSS 9.4