Skip to content
Citrix Patches Flaws in NetScaler Products

Citrix Patches Flaws in NetScaler Products

First seen 12 Nov 2026, 17:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 17:20 UTC
  • •Citrix patched 12 critical vulnerabilities in NetScaler products.
  • •CVE-2026-107412 is the most severe, with a CVSS score of 9.5.
  • •No confirmed exploitation of these vulnerabilities has been reported.

Citrix has issued patches for 12 vulnerabilities affecting NetScaler ADC and Gateway, which could lead to denial-of-service (DoS) attacks and authentication bypass. The most severe flaw, CVE-2026-107412, has a CVSS score of 9.5 and requires specific configurations to exploit. Other vulnerabilities include CVE-2026-120868, which affects default configurations and can cause unpredictable behavior. The vulnerabilities impact various configurations, including DNS load balancing and Email OTP authentication. Citrix has not reported any confirmed exploitation of these vulnerabilities. Admins are urged to update to the latest versions to mitigate risks. The patches are part of a new monthly update schedule announced by Citrix.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-12
Citrix releases security patches
Citrix issued patches for 12 critical vulnerabilities in NetScaler ADC and Gateway, urging admins to update systems.
Thehackernews
2026-11-12
Heise reports on vulnerabilities
Heise details the critical vulnerabilities in Citrix NetScaler products and the potential for DoS attacks.
Heise.De

More articles in this cluster (9)

Following this threat?

Track CVE-2026-107407 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (27)

1 / 3

Common questions

Which versions are affected?
Affected versions include Citrix NetScaler ADC and Gateway 14.1-73.57 and later, and 13.1-64.39 and later.
Is there any active exploitation?
No confirmed exploitation of these vulnerabilities has been reported by Citrix.
What should I do to protect my systems?
Admins should apply the latest patches immediately to mitigate the vulnerabilities.