
Citrix patches 28 NetScaler flaws, nine of them critical
A separate NetScaler Console bug, CVE-2026-120869, scores 9.4 and allows unauthenticated access to restricted resources.
10 stories, newest first · one card per story

A separate NetScaler Console bug, CVE-2026-120869, scores 9.4 and allows unauthenticated access to restricted resources.

CVE-2026-120868 affects every ADC and Gateway deployment, including the default configuration; Citrix reports no exploitation.

Citrix patched critical NetScaler flaw CVE-2026-107406, a CVSS 9.5 memory overflow that can enable denial of service or code execution.

Citrix patched critical NetScaler flaw CVE-2026-107406, which can allow remote code execution or denial of service.

Citrix patched CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can enable RCE on SAML deployments.

Citrix disclosed CVE-2026-107406, a CVSS 9.5 NetScaler memory overflow that can allow remote code execution.

Citrix urges NetScaler ADC and Gateway customers to patch CVE-2026-107406, a critical SAML memory overflow enabling remote code execution.

Citrix patched CVE-2026-88779, a high-severity NetScaler memory overflow exploited as a zero-day.

Citrix patched CVE-2026-88779, a CVSS 8.7 unauthenticated NetScaler SAML memory overflow enabling persistent remote DoS, reportedly exploited in targeted attacks.

watchTowr dissects CVE-2026-88772, an in-the-wild-exploited pre-auth DTLS memory overflow in Citrix NetScaler enabling RCE, one of eight fixed flaws.
Today 1.1K readers · 1.3K views · 255 reads · all time 195K views