CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability

First reported by Security Affairs at · Updated · 1 source

Citrix patched CVE-2026-107406, a critical NetScaler ADC and Gateway flaw that could allow remote code execution or denial-of-service attacks. Citrix has released security updates to fix CVE-2026-107406 (CVSS score of 9.5), a critical flaw affecting NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service (DoS) under certain conditions.

Reported so far by one publisher.

Summary from Security Affairs.

Reporting1

Security Affairs CVE-2026-107406: Citrix Fixes Critical NetScaler ADC and Gateway Vulnerability · Pierluigi Paganini

Related

Splunk Fixes 24 Security Flaws, Including Four Critical Vulnerabilities in Enterprise and SOAR