Citrix and SonicWall issue urgent patches for critical security flaws

Citrix and SonicWall have issued urgent warnings regarding critical security vulnerabilities in their networking and security appliances.

Citrix has patched CVE-2026-107406, a memory overflow vulnerability in NetScaler ADC and NetScaler Gateway appliances with a CVSS score of 9.5. The flaw could allow remote code execution or denial-of-service attacks, specifically affecting devices configured as SAML Service Providers or Identity Providers. While Citrix reports no known unmitigated exploits, it has urged immediate patching following a series of recent NetScaler zero-day vulnerabilities.

Separately, SonicWall is facing active exploitation of a maximum-severity flaw (CVE-2026-102255) in its SMA1000 series appliances. Despite initial advisories suggesting no in-the-wild activity, security researchers at Previdian detected exploitation attempts within 24 hours of disclosure. The vulnerability, which carries a CVSS score of 10.0, involves a server-side request forgery (SSRF) that allows unauthenticated attackers to reach internal services via the WorkPlace Extraweb interface. The flaw affects SMA 6210, 7210, and 8200v models.