Citrix Warns of Critical NetScaler SAML Flaw CVE-2026-107406 That Can Lead to Remote Code Execution
ID: c2745a79-2d69-5e6a-9454-e06df2e86ee7
STIX ID: report--c2745a79-2d69-5e6a-9454-e06df2e86ee7
Feed Name: securityonline.info
Threat Score
Citrix published an advisory for CVE-2026-107406, a critical (CVSS v4 9.5) memory overflow in NetScaler ADC/Gateway that can enable remote code execution or denial of service when the appliance is configured as a SAML IdP or SP; Citrix has released fixes for specific builds and urges affected customers to upgrade immediately, noting no confirmed exploitation so far.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.