NVD disclosure day

Published threat advisories for November 13, 2026

CVE advisoryCRITICAL

CVE-2026-107415

Citrix NetScaler Memory Overflow in Email OTP Authentication Leads to Denial of Service

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A memory overflow in Citrix NetScaler ADC and Gateway's email OTP authentication can cause unpredictable behavior or denial of service. This vulnerability is typically accessible externally without authentication, potentially impacting network access and services. Confirming its relevance and exposure within the enviro

CVE advisoryCRITICAL

CVE-2026-107412

Citrix NetScaler ADC Gateway Memory Overflow Vulnerabilities

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Multiple memory overflow vulnerabilities in Citrix NetScaler ADC and Gateway could lead to denial of service or unpredictable behavior. These systems are often internet-facing, making them accessible to external threats. This poses a risk to the stability and availability of critical gateway services.

CVE advisoryCRITICAL

CVE-2026-127277

Linksys EA8100 SMB Service Improper Initialization Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical security flaw in Linksys routers' SMB service allows remote attackers to perform improper initialization via argument manipulation. This vulnerability could lead to unauthorized access and modification of data. The exploit is publicly available, and the vendor has not responded to the disclosure, making it c

CVE advisoryCRITICAL

CVE-2026-107410

NetScaler ADC and Gateway Memory Overflow Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A memory overflow vulnerability in NetScaler Push can cause unpredictable behavior or denial of service in NetScaler ADC and NetScaler Gateway. This issue is remotely exploitable without authentication, and due to the common deployment of these products as internet-facing components, it presents a risk to system stabil

CVE advisoryCRITICAL

CVE-2026-107409

Citrix NetScaler DoH Memory Corruption Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A memory corruption vulnerability in the DNS-over-HTTPS (DoH) service of Citrix NetScaler could lead to unpredictable behavior or a Denial of Service. This issue is reachable over the network without special access, potentially impacting the availability of DNS resolution.

CVE advisoryCRITICAL

CVE-2026-107408

NetScaler ADC and Gateway DNS Memory Corruption Leads to Denial of Service

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A memory corruption vulnerability in NetScaler ADC and NetScaler Gateway's DNS and DNS-over-HTTPS services could lead to unpredictable behavior or denial of service if reachable. This impacts the stability and availability of these edge networking appliances, which are often deployed publicly.

CVE advisoryCRITICAL

CVE-2026-107407

NetScaler ADC and Gateway SMPP Memory Overflow Denial of Service.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A memory overflow in NetScaler ADC and NetScaler Gateway related to SMPP traffic can cause unpredictable behavior or denial of service. Because these devices often handle internet traffic, this vulnerability could be exposed and impact service availability.

CVE advisoryCRITICAL

CVE-2026-127275

Linksys EA8100 JNAP API Missing Authentication Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A critical vulnerability in the JNAP API of Linksys routers allows unauthenticated remote attackers to alter router settings, potentially impacting network security. Exploitation is possible remotely due to the nature of the affected component and its common internet-facing deployment.

CVE advisoryCRITICAL

CVE-2026-120868

NetScaler ADC and Gateway Memory Overflow Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A memory overflow in NetScaler ADC and NetScaler Gateway packet processing may cause unpredictable behavior or denial of service. This vulnerability could be triggered by crafted network packets without authentication, impacting appliance availability and stability.