CVE-2026-107406: Critical NetScaler ADC and Gateway RCE Vulnerability

**CVE-2026-107406 — Citrix NetScaler critical memory overflow:** Citrix disclosed a critical memory overflow in NetScaler ADC and Gateway appliances (CVSS v4.0 9.5) that can allow unauthenticated remote code execution or DoS when appliances are configured as SAML SP or IdP; the bulletin lists affected builds, recommended fixed releases, detection guidance, and credits external researchers, and notes no confirmed public exploitation at disclosure.