CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability
ID: fb37ceb0-fcd6-5b63-8359-f8dfd8fe7d4e
STIX ID: report--fb37ceb0-fcd6-5b63-8359-f8dfd8fe7d4e
Feed Name: Security Affairs
Threat Score
Citrix released patches for CVE-2026-107406, a critical (CVSS v4.0 base score 9.5) memory overflow in NetScaler ADC and Gateway that can enable remote code execution or denial-of-service when appliances are configured as SAML Service Provider or Identity Provider; affected versions and fixed releases are listed, customers are urged to update, and the vendor reports no known unmitigated exploitation of this CVE at the time of publication.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.