CVE-2026-107406: Memory overflow RCE/DoS in NetScaler ADC and Gateway

CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability

Citrix patched critical NetScaler flaw CVE-2026-107406, which can allow remote code execution or denial of service.

Citrix patched CVE-2026-107406, a critical memory-overflow flaw (CVSS 9.5) in NetScaler ADC and NetScaler Gateway that can allow remote code execution or denial of service when the appliance is configured as a SAML service provider or identity provider. Fixed builds include 14.1-73.46 and later and 13.1-64.29 and later, plus listed FIPS and NDcPP releases. Citrix says it is not aware of exploitation of this bug. Separately, it confirmed active exploitation of CVE-2026-88771 and CVE-2026-88772, and CISA added DoS flaw CVE-2026-88779 to the KEV catalog.

Security AffairsOct 9, 10:04 UTC · 16h agoVulnerability in the wildCVE-2026-107406 CVE-2026-88771 CVE-2026-88772+1 CVEs

Citrix issues its weekly critical security patch for NetScaler ADC and NetScaler Gateway

Citrix patched critical NetScaler flaw CVE-2026-107406, a CVSS 9.5 memory overflow that can enable denial of service or code execution.

Citrix warned customers running their own NetScaler ADC and NetScaler Gateway of CVE-2026-107406, a critical memory overflow scored CVSS v4.0 9.5. The flaw affects appliances configured as a SAML identity provider, and older versions configured as a SAML service provider, and can lead to denial of service or remote code execution. Citrix said it was not aware of unmitigated exploits and urged upgrades to 13.1-64.29, 14.1-73.46, or later, and 13.1.37.283 or later for 13.1-FIPS. The notice follows recent NetScaler fixes, including denial-of-service bug CVE-2026-88779, which Citrix said was exploited, and memory-overread CVE-2026-3055.

CSO OnlineOct 9, 14:28 UTC · 11h agoVulnerability CVE-2026-107406 CVE-2026-88779 CVE-2026-3055

Citrix warns admins to patch new NetScaler RCE flaw immediately

Citrix urges immediate patches for critical NetScaler RCE CVE-2026-107406, with no known exploitation yet.

Citrix urged immediate upgrades for CVE-2026-107406, a critical memory-overflow flaw in NetScaler ADC and NetScaler Gateway that can allow remote code execution or a denial-of-service crash. Exploitation requires the appliance to be configured as a SAML identity provider or service provider. Recommended builds include 14.1-73.46 and later and 13.1-64.29 and later, plus specified FIPS and NDcPP releases. Citrix said it is not aware of exploitation of this bug, while noting several other NetScaler flaws abused earlier in 2026; Shadowserver tracks more than 21,000 exposed NetScaler IPs.

BleepingComputerOct 9, 08:27 UTC · 17h agoVulnerability CVE-2026-107406 CVE-2026-3055 CVE-2026-4368+3 CVEs

Citrix Urges Immediate Patching of Critical NetScaler Vulnerability

Citrix urges immediate patching of critical NetScaler ADC/Gateway memory-overflow flaw CVE-2026-107406 (CVSS 9.5) enabling RCE; no known exploits yet.

Citrix disclosed CVE-2026-107406, a critical memory overflow (CVSS 9.5) that can lead to remote code execution or denial of service. The flaw affects NetScaler ADC and NetScaler Gateway appliances configured as SAML SP or SAML IdP, plus Secure Private Access Hybrid deployments using NetScaler. Fixes shipped in versions 14.1-73.46, 13.1-64.29, and FIPS variants 14.1-73.46 FIPS and 13.1-37.283. Citrix states it is not aware of unmitigated exploitation, but the disclosure follows three recently exploited NetScaler zero-days (CVE-2026-88771, CVE-2026-88772, CVE-2026-88779).

SecurityWeekOct 9, 06:53 UTC · 19h agoVulnerability CVE-2026-107406 CVE-2026-88779 CVE-2026-88771+1 CVEs1

Citrix gives NetScaler admins another critical reason to patch

Citrix warns NetScaler ADC and Gateway CVE-2026-107406 can enable remote code execution, scoring CVSS 9.5.

Citrix urged customers to patch CVE-2026-107406, a CVSS 9.5 memory-buffer flaw (CWE-119) in NetScaler ADC and NetScaler Gateway that can lead to remote code execution or denial of service. Affected SAML service-provider or identity-provider configurations depend on the build, and Secure Private Access Hybrid deployments using NetScaler also need updates. Citrix has not identified this bug as exploited, unlike earlier flaws CVE-2026-88772, targeted since at least early September, and CVE-2026-88779. JPMorgan Chase's XOR Team and Maxim Suhanov were credited with the discovery.

The Register · SecurityOct 9, 11:43 UTC · 14h agoVulnerability CVE-2026-107406 CVE-2026-88772 CVE-2026-887791

Critical Citrix NetScaler Vulnerability Allows Remote Code Execution Attacks – CVSS 9.5

Citrix disclosed CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can allow remote code execution.

Citrix disclosed CVE-2026-107406, a critical memory-overflow flaw (CWE-119) in customer-managed NetScaler ADC and NetScaler Gateway, tracked in bulletin CTX697191 with a CVSS v4.0 score of 9.5. Under specific SAML identity-provider or service-provider configurations, an unauthenticated attacker could achieve remote code execution or denial of service; attack complexity is rated high. Citrix said it was not aware of unmitigated exploits at publication. Recommended upgrades include 14.1-73.46 or later, 13.1-64.29 or later, and matching FIPS or NDcPP fixed builds; Citrix-managed cloud and Adaptive Authentication are excluded.

GBHackersOct 9, 06:17 UTC · 19h agoVulnerability CVE-2026-1074061

Citrix Urges NetScaler ADC and Gateway Customers to Patch for New Critical RCE Vulnerability

Citrix urges NetScaler ADC and Gateway customers to patch CVE-2026-107406, a critical SAML memory overflow enabling remote code execution.

Citrix bulletin CTX697191, published October 8, 2026, discloses CVE-2026-107406, a critical memory-overflow flaw (CWE-119, CVSS v4.0 9.5) in NetScaler ADC and NetScaler Gateway. Exploitation over the network requires no privileges or user interaction but has high attack complexity, and could lead to remote code execution or denial of service on appliances using certain SAML IdP or SP configurations. Citrix said it was not aware of unmitigated exploits and credited researchers from the JPMorgan Chase XOR Team and Maxim Suhanov. Customers should upgrade to 14.1-73.46, 13.1-64.29, 14.1-73.46 FIPS, or 13.1-37.283 and later as applicable; Citrix-managed cloud services are updated by the vendor.

Cyber Security NewsOct 9, 01:50 UTC · 1d agoVulnerability CVE-2026-1074061

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments

Citrix patched CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can enable RCE on SAML deployments.

Citrix patched CVE-2026-107406, a memory overflow in NetScaler ADC and NetScaler Gateway scored CVSS 9.5. Under specific SAML identity-provider or service-provider configurations, the flaw can lead to remote code execution or denial of service. Citrix says there is no evidence of exploitation. Secure Private Access Hybrid deployments using affected NetScaler instances must also be upgraded. Separately, CVE-2026-88771, CVE-2026-88772, and CVE-2026-88779 are already being exploited.

The Hacker NewsOct 9, 08:11 UTC · 17h agoVulnerability CVE-2026-1074061

Citrix security advisory (AV26-1023)

Canada's Cyber Centre urges patches for Citrix NetScaler ADC and Gateway flaw CVE-2026-107406.

On October 9, 2026, the Canadian Centre for Cyber Security published advisory AV26-1023 for Citrix NetScaler ADC and NetScaler Gateway. It points to Citrix's bulletin for CVE-2026-107406 and lists releases before 13.1-64.29 and 14.1-73.46, plus FIPS builds before 14.1-73.46 FIPS and 13.1-37.283 FIPS and NDcPP. The centre urges administrators to review Citrix's links and apply updates as they become available. The alert does not state a CVSS score or confirm in-the-wild exploitation.

Canadian Centre for Cyber SecurityOct 9, 13:31 UTC · 12h agoAdvisory CVE-2026-107406

Citrix NetScaler ADC and NetScaler Gateway	Before 14.1-73.37 when configured as a SAML SP or SAML IdP; 14.1-73.37 through 14.1-73.41 inclusive when configured as a SAML IdP
Citrix NetScaler ADC 14.1-FIPS	Before 14.1-73.37 FIPS when configured as a SAML SP or SAML IdP; 14.1-73.37 FIPS through 14.1-73.41 FIPS inclusive when configured as a SAML IdP
Citrix NetScaler ADC and NetScaler Gateway	Before 13.1-64.23 when configured as a SAML SP or SAML IdP; 13.1-64.23 through 13.1-64.28 inclusive when configured as a SAML IdP
Citrix NetScaler ADC 13.1-FIPS	Before 13.1-NDcPP 13.1-37.279 when configured as a SAML SP or SAML IdP; 13.1-NDcPP 13.1-37.279 through 13.1-37.282 inclusive when configured as a SAML IdP

CVE-2026-107406

In the news9 stories