Citrix Urges Immediate Patching of Critical NetScaler RCE and DoS Flaw
Summary
Citrix urged customers to patch CVE-2026-107406, a critical NetScaler memory-overflow flaw that could enable remote code execution or denial of service. Fixes are available, and Citrix says it is unaware of unmitigated exploits.
Key points
- CVE-2026-107406 has a CVSS score of 9.5 and is described as a memory overflow that could lead to remote code execution or denial of service.
- The flaw affects NetScaler ADC and Gateway appliances configured as a SAML service provider or identity provider under specific conditions.
- Secure Private Access Hybrid deployments using NetScaler are also affected.
- Citrix included fixes in NetScaler ADC and Gateway versions 14.1-73.46, 13.1-64.29, 14.1-73.46 FIPS, and 13.1.37.283 for 13.1-FIPS and 13.1-NDcPP.
- Citrix urged customers to upgrade promptly and said it was not aware of any unmitigated exploits of this vulnerability at the time of its bulletin.
- The warning follows recent NetScaler zero-day disclosures; two other flaws were exploited in attacks against organizations in several sectors.
Article Details
- Vulnerability Types
- Memory overflow
- Severity
- Critical (CVSS 9.5)
- Exploitation Status
- not_reported
- Exploit Availability
- unknown
- Patch Status
- available
CVE
CVE-2026-107406Tracked as CVE-2026-107406 (CVSS score of 9.5), the flaw is described as a memory overflow that could lead to remote code execution (RCE) or denial-of-service (DoS).CVE-2026-88771A week before, two other NetScaler zero-days were patched: CVE-2026-88771 (leading to RCE), and CVE-2026-88772 (leading to RCE or DoS).CVE-2026-88772A week before, two other NetScaler zero-days were patched: CVE-2026-88771 (leading to RCE), and CVE-2026-88772 (leading to RCE or DoS).CVE-2026-88779Citrix’s fresh warning comes days after the company sounded the alarm on CVE-2026-88779, a zero-day in NetScaler leading to DoS.
Vendors
Products
NetScaler ADCAccording to Citrix, the security defect impacts NetScaler ADC and NetScaler Gateway appliances configured as a SAML SP or SAML IdP, under specific configuration conditions.NetScaler GatewayAccording to Citrix, the security defect impacts NetScaler ADC and NetScaler Gateway appliances configured as a SAML SP or SAML IdP, under specific configuration conditions.Secure Private Access HybridThe bug also affects Secure Private Access Hybrid deployments that use NetScaler.
Industries
EducationThey have been exploited in attacks against government, financial services, education, legal, and professional services organizations.Financial ServicesThey have been exploited in attacks against government, financial services, education, legal, and professional services organizations.GovernmentThey have been exploited in attacks against government, financial services, education, legal, and professional services organizations.LegalThey have been exploited in attacks against government, financial services, education, legal, and professional services organizations.Professional ServicesThey have been exploited in attacks against government, financial services, education, legal, and professional services organizations.