[CLSTR]
< Back to all clusters
[TECHNOLOGY] · 5 sources

started · updated

Part of situation: NetScaler product security vulnerabilities (7 clusters)

Citrix patches critical NetScaler vulnerability

Citrix NetScaler CVE-2026-107406 SAML remote code execution

Citrix has released security patches for a critical memory overflow vulnerability, identified as CVE-2026-107406, affecting NetScaler ADC and NetScaler Gateway. The flaw carries a CVSS score of 9.5 out of 10 and could allow for remote code execution (RCE) or denial-of-service (DoS) attacks.

Successful exploitation depends on specific configurations where the NetScaler instances are acting as a SAML identity provider (IdP) or a service provider (SP). The vulnerability also impacts Secure Private Access Hybrid deployments using NetScaler instances.

While there is currently no evidence that this vulnerability has been exploited in the wild, Citrix advises customers to upgrade to recommended versions to mitigate the risk. The flaw was discovered and reported by researchers from the JPMorgan Chase XOR Team and Maxim Suhanov.

Entities

Citrix · JPMorgan Chase · NetScaler

Sources

Ivanti misses opportunity to fix vulnerability before attackers got to work and made it a zero-day [cybernoz.com]
Ransomware Exploitation of Palo Alto Networks GlobalProtect CVE-2024-3400 [flagthis.com]
Citrix NetScaler: falha crítica em SAML pode permitir execução de código e indisponibilidade [minutodaseguranca.blog.br]
Micropatches released for Windows DNS Server Remote Code Execution Vulnerability (CVE-2026-62878) [0patch.com]
Ivanti VPN bypass, actively exploited [dev.to]