Citrix patches 12 NetScaler and Secure Access Client flaws
Fixes cover CVSS 9.3–9.5 memory flaws and an unauthenticated NetScaler Console authentication bypass; Citrix knows of no exploits.
76
CVE-2026-107412
- CVSS
- —
- EPSS
- —
- Published
- —
- Modified
- —
In the news
2 storiesCitrix patches 28 NetScaler memory flaws, including unauthenticated CVSS 9.3
CVE-2026-120868 affects every ADC and Gateway deployment, including the default configuration; Citrix reports no exploitation.
66